REDAXO before 5.21.4 Broken Access Control in Slice Operations
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.21.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
REDAXO, a PHP content management system, is affected by a broken access control flaw in how it handles slice operations. Authenticated editors can exploit this to delete, change, move, or overwrite slices belonging to other editors in categories they are not authorized to edit.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices in unauthorized categories by pairing a permitted article with a foreign slice id. Attackers can abuse content/edit delete and edit functions or the content_slice_status and content_move_slice APIs to delete, toggle, move, or overwrite other editors' slices.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- redaxo core
fixed in 5.21.4