CyberRota Analysis
AI-GeneratedThe inviteController.js component in Bluewave Labs Checkmate versions up to 3.3.0 contains a vulnerability that allows remote authenticated administrators to escalate their privileges to superadmin by manipulating the role parameter in the /api/v1/invite endpoint. This could lead to unauthorized access and control over the application, potentially compromising sensitive data and system integrity. Organizations using affected versions should prioritize remediation to mitigate the risk of privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/invite endpoint.