Threats affecting pkg:composer/wolfcms/wolfcms

Wolf CMS versions through 0.8.3.1 have an authorization bypass vulnerability in the BackupRestoreController. This flaw is due to a PHP operator precedence error in the permission check expression, allowing authenticated non-administrative users to access backup functionality. Exploitation enables these users to create, download, and restore backups without administrative privileges.