CVE-2026-57518— pagekit 授权问题漏洞

Pagekit CMS 1.0.18 Privilege Escalation via UserApiController

Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage users' permission to escalate privileges by assigning arbitrary custom roles to themselves due to missing authorization checks in UserApiController::saveAction(). Attackers can assign themselves a custom role with the 'system: manage packages' permission and then upload and install a malicious PHP package through the admin package installer to achieve remote code execution.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

授权机制缺失

pagekit 授权问题漏洞

Pagekit是Pagekit公司开源的一套模块化的、轻量级CMS(内容管理系统)。 Pagekit 1.0.18版本存在授权问题漏洞，该漏洞源于UserApiController::saveAction()中缺失授权检查，可能导致拥有'user: manage users'权限的已认证用户通过分配自定义角色以实现权限提升。

N/A

N/A