CVE-2023-53914
BaseFortify
Publication date: 2025-12-17
Last updated on: 2025-12-24
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ulicms | ulicms | 2023.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in UliCMS 2023.1 is an authentication bypass that allows unauthenticated attackers to create admin users by exploiting mass assignment in the UserController. Attackers can send a specially crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative account with full system access.
How can this vulnerability impact me? :
The vulnerability can allow attackers to gain full administrative access to the system without authentication. This means they can control the entire system, potentially leading to data breaches, unauthorized changes, and complete compromise of the affected UliCMS installation.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for suspicious HTTP POST requests to the admin index.php endpoint, specifically requests that include parameters such as 'admin=1' and 'group_id=1' which indicate attempts to create an administrative user via mass assignment. A practical detection method is to analyze web server logs for POST requests to '/dist/admin/index.php' containing these parameters. For example, using command-line tools like grep on access logs: grep -i 'POST /dist/admin/index.php' /path/to/access.log | grep -E 'admin=1|group_id=1'. Additionally, network intrusion detection systems (NIDS) can be configured to alert on such crafted POST requests targeting this endpoint. [2, 3]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the vulnerable admin endpoint to trusted IP addresses or networks, applying web application firewall (WAF) rules to block POST requests containing 'admin=1' and 'group_id=1' parameters, and disabling or limiting mass assignment functionality in the UserController if possible. Additionally, updating UliCMS to a patched version that addresses this authentication bypass vulnerability is critical once available. Until a patch is applied, monitoring and blocking suspicious requests as described can reduce risk. [2, 3]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided resources do not contain information on how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.