BLUVOYIX Improper Authentication Vulnerability in Admin APIs Allowing Unauthorized User Creation

A vulnerability in BLUVOYIX exists due to improper authentication in the admin APIs. This flaw allows an unauthenticated remote attacker to send specially crafted HTTP requests to the vulnerable admin API, creating a new user with admin privileges. Exploiting this vulnerability could grant the attacker full access to customer data and lead to a complete compromise of the targeted platform by logging in as the newly-created admin user.

Impact

Successful exploitation allows unauthorized creation of admin users, leading to full access to customer data and complete compromise of the platform.