Abdul Moiz

**Name of the Vulnerable Software and Affected Versions** FileGator (affected versions not specified) **Description** An authenticated user with 'chmod' permission can upgrade their privileges to root. This occurs because the '/chmoditems' API endpoint accepts arbitrary Unix permission values and passes them directly to the PHP native `chmod()` function via `octdec()` conversion without proper validation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.