askiesec/cve-2025-2304-pocProof-of-concept exploit for CVE-2025-2304, a privilege escalation vulnerability in Camaleon CMS 2.9.0 via mass assignment on the password change endpoint, allowing authenticated users to escalate to administrator.
PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint.
The /admin/users/:id/updated_ajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user to escalate to administrator.
python3 CVE-2025-2304-POC.py -u http://target.htb --username bob --password bob123 --user-id 5
| Flag | Description |
|---|---|
-u | Target base URL |
--username | Low-privileged username |
--password | Current password |
--new-password | New password after change (optional, defaults to current) |
--user-id | Target user ID |
pip install requests