MRCMS Access Control Vulnerability Allowing Unauthorized Super Administrator Account Creation

An access control vulnerability exists in MRCMS version 3.1.2. The issue arises in the UserController's save() method, which fails to implement proper authorization checks. This flaw allows unauthorized users to add super administrator accounts directly, without authentication, potentially leading to complete compromise of the website.

Impact

Exploitation of this vulnerability allows for the unauthorized creation of super administrator accounts, which could be used to gain full control over the MRCMS website.

Reproduction

To reproduce this vulnerability, intercept a request to the user management interface using Burp Suite. Remove the authentication cookie from the request and resend it. The super administrator account will be created successfully, without authentication.