{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/smart-sso/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:smart-sso:smart-sso:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-121543"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-121543\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["smart-sso (\u003c= 2.0.1)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","authentication-bypass","web-application"],"_cs_type":"advisory","_cs_vendors":["smart-sso"],"content_html":"\u003cp\u003eThe PermissionFilter component in smart-sso up to version 2.0.1 fails to properly restrict access to administrative console APIs. Because the filter permits unlisted paths by default, any authenticated user can invoke sensitive administrative functions. An attacker can exploit this to perform actions such as calling '/admin/user-role/save' to assign themselves administrative privileges, reset passwords, or manage applications across integrated systems.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation allows an authenticated user to achieve full administrative control over the smart-sso environment. This includes the ability to modify user roles, perform password resets, and gain management access to integrated systems linked to the SSO platform.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate smart-sso to a version beyond 2.0.1 that addresses the permissive authorization logic in PermissionFilter.\u003c/li\u003e\n\u003cli\u003eAudit access logs for unauthorized requests to the '/admin/' path hierarchy made by non-administrative user accounts.\u003c/li\u003e\n\u003cli\u003eConfigure the web server or application firewall to explicitly deny access to administrative API endpoints for all users except those assigned to the administrator role.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T21:27:54Z","date_published":"2026-11-03T18:01:06Z","id":"https://feed.craftedsignal.io/briefs/2026-11-smart-sso-auth/","summary":"An incorrect authorization vulnerability in smart-sso versions 2.0.1 and earlier allows authenticated users to access administrative APIs due to a permissive default configuration in PermissionFilter.","title":"smart-sso: Incorrect authorization in PermissionFilter (CVE-2026-121543)","url":"https://feed.craftedsignal.io/briefs/2026-11-smart-sso-auth/"}],"language":"en","title":"CraftedSignal Threat Feed - Smart-Sso","version":"https://jsonfeed.org/version/1.1"}