Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitted by an Administrator. This allows a normal user to escalate their privileges by adding additional roles to their account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Castel NextGen DVR 安全漏洞
Vulnerability Description
Castel NextGen DVR v1.0.0版本中存在安全漏洞，该漏洞源于Adminstrator/Users/Edit/:UserId功能没有检查请求是否来自管理员。攻击者可利用该漏洞向其账户添加角色，进而提升权限。
CVSS Information
N/A
Vulnerability Type
N/A