Kodcloud KodExplorer Authorization Bypass Vulnerability

An authorization bypass vulnerability has been identified in kodcloud KodExplorer versions through 4.52. The issue resides in the roleGroupAction function within the file /app/controller/systemRole.class.php. By manipulating the group_role parameter, a low-privilege user can bypass authorization and modify global group permission templates. This vulnerability can be exploited remotely, leading to unauthorized access and privilege escalation by allowing users to gain write permissions in shared locations.

Impact

Exploitation of this vulnerability allows for authorization bypass, enabling low-privilege users to gain unauthorized access to modify permission templates. This could lead to privilege escalation by allowing users to overwrite read-only permissions and gain write access in shared locations.