Skip to content
Threat Feed
Subscribe

Tag

Poweradmin

1 brief RSS
high advisory

Poweradmin OIDC `sub` Collation Bypass Leads to Account Takeover

A collation vulnerability in Poweradmin's OIDC integration allows an unauthenticated attacker to take over victim accounts by exploiting the case and accent-insensitive MySQL collation (`utf8mb4_unicode_ci`) used for OIDC subject (`sub`) identifiers, causing the attacker's colliding `sub` to resolve to the victim's `user_id` during authentication.

Poweradmin >= 4.1.0, < 4.2.5 +1 account-takeover oidc vulnerability web-application poweradmin
1t