Sarman Soft CMS Execution After Redirect Vulnerability Allowing JSON Hijacking and Authentication Bypass

An Execution After Redirect (EAR) vulnerability has been identified in the Sarman Soft CMS, developed by Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. This vulnerability allows JSON Hijacking, also known as JavaScript Hijacking, and Authentication Bypass. It affects the CMS versions through 10022026.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of user authentication, allowing attackers to bypass authentication mechanisms and potentially access or modify sensitive information.

Remediation

The vendor has not yet addressed this vulnerability. Users are advised to consider alternative applications.