Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CouchCMS Privilege Escalation via f_k_levels_list Parameter
Vulnerability Description
CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list parameter in user creation requests. Attackers can modify the parameter value from 4 to 10 in the HTTP request body to bypass authorization validation and gain full application control, circumventing restrictions on SuperAdmin account creation and privilege assignment.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
CouchCMS 安全漏洞
Vulnerability Description
CouchCMS是CouchCMS开源的一套面向设计人员的开源内容管理系统（CMS）。 CouchCMS存在安全漏洞，该漏洞源于授权验证不当，可能导致经过身份验证的管理员用户通过篡改参数创建超级管理员账户并提升权限。
CVSS Information
N/A
Vulnerability Type
N/A