by Kastro
Paper/Archive/CVE-2025-2304

CVE-2025-2304

owen2345 camaleon-cms — Camaleon CMS Privilege Escalation

EPSS 0.6%CVSS 9.4
critical.is priorityof 100
38
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 50.1.501 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without any filtering.

Affected

ProductAffectedFixed inSource
camaleon-cmssee advisory–CNA

Scores by source

tenable (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftenable.com/security/research/tra-2025-09refgithub.com/owen2345/camaleon-cms