PT-2025-11259 · Unknown · Camaleon Cms

Published 2025-03-14 · Updated 2026-05-07 · CVE-2025-2304

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Camaleon CMS (affected versions not specified)

Description Privilege escalation is possible through mass assignment, a condition where an application takes user-provided data and binds it to an internal object without proper filtering. This occurs when the updated ajax() function of the UsersController is called during a password change request. The issue is caused by the use of the permit! method, which allows all parameters to be processed without validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-915

Related Identifiers

CVE-2025-2304

GHSA-RP28-MVQ3-WF8J

Affected Products

Camaleon Cms

References · 17

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2025-2304.yml · Exploit
• https://osv.dev/vulnerability/CVE-2025-2304 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2304 · Security Note
• https://osv.dev/vulnerability/GHSA-rp28-mvq3-wf8j · Vendor Advisory
• https://github.com/owen2345/camaleon-cms · Note
• https://github.com/owen2345/camaleon-cms/releases/tag/2.9.1 · Note
• https://github.com/owen2345/camaleon-cms/commit/179fd6b1ecf258d3e214aebfa87ac4a322ea4db4 · Note
• https://github.com/owen2345/camaleon-cms/pull/1109 · Note
• https://twitter.com/CveFindCom/status/1900533016939659555 · Twitter Post
• https://twitter.com/CVEnew/status/1900538666461671834 · Twitter Post
• https://twitter.com/rubylandnews/status/1902047578495008873 · Twitter Post
• https://t.me/true_secator/8183 · Telegram Post
• https://t.me/cvetracker/19124 · Telegram Post
• https://tenable.com/security/research/tra-2025-09 · Note
• https://t.me/latest_high_impact_cve/1963 · Telegram Post