CyberRota Analysis
AI-GeneratedCraft CMS versions prior to 5.10.11 are vulnerable due to insufficient validation of admin status in the password reset functionality, allowing non-admin users with specific permissions to generate password reset URLs for admin accounts. This flaw can lead to unauthorized access and complete control over the admin panel, posing a significant security risk. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint password reset URLs for administrator accounts. Attackers can generate a valid reset URL for any admin user and set a new password via actionSetPassword, which validates only the verification code without checking the caller's session, enabling complete control-panel takeover.