Camaleon CMS vulnerabilities
6 known vulnerabilities in Camaleon CMS from Owen2345. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Camaleon CMS: Missing Authorization
Camaleon CMS before 2.9.2 contains a missing authorization vulnerability in Admin::MediaController that allows low-privileged authenticated users to bypass the role-based Media permission. Attackers can POST to /admin/media/upload to store files, read private
- 8.8 High severity
camaleon-cms: Improper Limitation of a Pathname to a Restricted Directory
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64 data: URI to the crop_url media action to
- 8.8 High severity
camaleon-cms: Improper Control of Generation of Code
Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution vulnerability that allows users with custom_fields manage permission to execute arbitrary Ruby code by supplying a malicious expression through the select_eval custom fie
- 9.4 Critical severity
camaleon-cms: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows al
- 7.7 High severity
camaleon-cms: Improper Limitation of a Pathname to a Restricted Directory
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS
- 9.9 Critical severity
camaleon-cms: Improper Limitation of a Pathname to a Restricted Directory
Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the we