Threats tagged 'ghsa-fm29-4mq3-phg6'

Winter CMS versions prior to 1.2.14 contain a vulnerability in the ImportExportController behavior where granular import/export permission checks are bypassed on AJAX handlers. Authenticated backend users with access to a controller but without the specific import or export permissions can perform unauthorized data export and import operations. The issue arises because permission checks were only applied to page actions, not to AJAX handlers that perform the actual import/export work. This allows exfiltration of data and modification of records without proper authorization. The vulnerability requires a valid backend session and access to a controller using the affected behavior with configured granular permissions.