Creartia ICMS Authorization Bypass Vulnerability Allowing Privilege Escalation

An authorization bypass vulnerability has been identified in Creartia's ICMS content management software. This vulnerability could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers during the login process. As a result, the script may continue executing, enabling privilege escalation without requiring credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized access and privilege escalation within the application.

Remediation

Creartia Internet Consulting has released a patch for this vulnerability. Users are advised to update to the latest version.