CyberRota Analysis
AI-GeneratedWolf CMS versions up to 0.8.3.1 are vulnerable to an authorization bypass in the BackupRestoreController, allowing authenticated non-administrative users to access restricted backup functionalities. This flaw arises from a PHP operator precedence issue in the permission check, enabling attackers to create, download, and restore backups without proper authorization. Organizations using this CMS should prioritize patching this vulnerability to prevent unauthorized data access and potential data loss.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated non-administrative users to access restricted backup functionality due to a PHP operator precedence flaw in the permission check expression. Attackers can exploit the incorrect evaluation of the access control expression to create, download, and restore backups without administrative privileges.