Melis Technology Melis Platform Unauthenticated Administrator Account Creation Vulnerability

A vulnerability exists in the melis-core module of Melis Technology's Melis Platform, affecting versions prior to 5.3.11. This vulnerability allows an unauthenticated attacker to create an administrator account by sending a request to the '/melis/MelisCore/ToolUser/addNewUser' endpoint.

Impact

Exploitation of this vulnerability allows for the creation of administrator accounts, potentially leading to unauthorized access and privileges within the Melis Platform.

Remediation

Users can upgrade to Melis Platform version 5.3.11 or later to address this vulnerability.