Threats tagged 'ghsa-j5jq-cr68-v2xx'

Winter CMS versions prior to 1.2.13 contain a vulnerability in the backend module where authenticated backend users can bypass permission checks on the Users controller. This occurs because the backend did not properly validate the _handler POST field, allowing invocation of arbitrary controller methods, including those normally protected. The Users controller was specifically affected due to a null $requiredPermissions setting on the myaccount action, enabling unauthorized user-management operations. The issue is fixed in version 1.2.13.