Executive Summary

This vulnerability exists in Grav's Admin plugin before version 1.8.0-beta.27. It occurs because the system does not validate username uniqueness when creating new users. As a result, a user who has permission to create users can create a new account with the same username as an existing administrator, set a new password and email for that account, and then log in as that administrator. This allows the user to escalate their privileges from limited user-manager permissions to full administrator access.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with limited permissions to gain full administrator access to the Grav platform. This means they can control the entire system, potentially modify or delete content, change configurations, and access sensitive data, leading to a complete compromise of the affected web platform.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Grav to version 1.8.0-beta.27 or later, where the vulnerability is fixed. Until then, restrict the create user permission to trusted users only to prevent unauthorized creation of accounts with duplicate administrator usernames.

Useful 0 Not Useful 0