Authorization bypass through user-controlled key in REDAXO - #VU140849
Published: August 4, 2026
Vulnerability details
The vulnerability allows a remote user to modify other editors' content outside their authorized categories.
The vulnerability exists due to authorization bypass through a user-controlled key in slice operations and related service-layer handlers when processing requests that supply an article reference for permission checks and an independent slice reference for the mutation. A remote user can send a specially crafted request to modify other editors' content outside their authorized categories.
The issue affects deleting slices, changing slice status, moving slices, and, with a matching module/template constellation, overwriting content. The attack is performed entirely within the user's authenticated session and does not require user interaction.