Camaleon CMS (< 2.9.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/camaleon-cms--2.9.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 15:48:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCamaleon CMS: Missing authorization in MediaController (CVE-2026-120429)https://feed.craftedsignal.io/briefs/2026-11-camaleon-cms-auth-bypass/Mon, 02 Nov 2026 15:48:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-camaleon-cms-auth-bypass/Camaleon CMS versions prior to 2.9.2 contain an authorization bypass vulnerability allowing low-privileged users to perform unauthorized file operations and modify user avatars.Camaleon CMS versions before 2.9.2 contain a missing authorization vulnerability within the Admin::MediaController. This flaw allows authenticated users with low privileges to bypass role-based permission checks. An attacker can exploit this to upload arbitrary files, access private media files via download_private_file, and manipulate other users' avatars by calling the crop function with saved_avatar.

Impact

Successful exploitation allows low-privileged users to read sensitive private media files, perform unauthorized file uploads, and perform account-level modification by altering user avatars.

Recommendation

  • Upgrade Camaleon CMS to version 2.9.2 or later to apply the authorization checks for media management.
  • Audit administrative media logs for unexpected file uploads or avatar modifications performed by low-privileged user accounts.
]]>highadvisory