PT-2026-48632 · Cerebrate · Cerebrate
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber |
Name of the Vulnerable Software and Affected Versions
Cerebrate versions prior to 1.37
Description
A mass-assignment issue exists in the generic CRUD add path. The
add() handler fails to properly remove an attacker-supplied id from $params before the request is normalized via massageInput(). Consequently, the normalized $input may still contain an id field, allowing a user to provide an identifier that should be controlled by the server. This could lead to the creation of objects with attacker-chosen identifiers, resulting in unauthorized data manipulation, object spoofing, inconsistent references, or disruption through identifier collisions.Recommendations
Update to version 1.37.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cerebrate