GouGuOA Mass Assignment Privilege Escalation: Root Cause & PoC

GouGuOA Mass Assignment Privilege Escalation Vulnerability Summary Vulnerability Overview Vulnerability Name: GouGuOA Mass Assignment Privilege Escalation (Mass Assignment Privilege Escalation) Vulnerability Type: Privilege escalation caused by Mass Assignment CVSS Score: 3.1 (High) CWE: CWE-269 (Improper Privilege Management), CWE-915 (Improper Modification of Dynamically Determined Properties) Root Cause: The endpoint uses ThinkPHP's pattern, where is directly sourced from (which returns unfiltered GET/POST parameters), allowing attackers to inject arbitrary values. Impact Affected Product: GouGuOA (by GouGu Open Studio) Affected Versions: v5.10.0 and all preceding v5.x versions Impact: Low-privilege employees (e.g., regular staff with position_id=3) can elevate themselves to Super Administrator (Super Position) by injecting , thereby gaining: - Access to all 102 user records (including password hashes, salts, phone numbers, and personal information) - System configuration management - Department and position management - RBAC rule management Key Code (Root Cause Analysis) POC / Exploitation Code Remediation Apply whitelist filtering to parameters returned by , allowing updates only for non-sensitive fields and prohibiting clients from directly submitting sensitive permission-related fields such as . Remove or restrict the combination of and to prevent all columns from being writable. In the endpoint, implement server-side validation for permission-related fields such as to prevent unauthorized modifications. Upgrade to the official fixed version released after v5.10.0 (the v5.10.0 source code confirms the vulnerability is 100% unfixed; a subsequent patch must be awaited).

Goal Reached Thanks to every supporter — we hit 100%!

GouGuOA Mass Assignment Privilege Escalation: Root Cause & PoC

More from this source