CVE-2025-2304

Description

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updated_ajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without any filtering.

References

https://github.com/Jeanback1/exploit-vault

https://github.com/Jeanback1/CVE-2023-30253-exploit

https://github.com/Jeanback1/CVE-2025-2304-exploit

https://github.com/mattiapertusati/htb-facts

https://github.com/Agentpathogene/CTf-CVE.py

https://github.com/estebanzarate/CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

https://github.com/MAEN1-prog/maen1-prog.github.io

https://github.com/MAEN1-prog/CVE-2025-2304

https://github.com/popyue/Camaleon-CMS-Exploits

https://github.com/CsuriBird/CVE-2025-2304

https://github.com/sparrowhawk1113/Exploit-for-CVE-2025-2304

https://github.com/predyy/CVE-2025-2304

https://github.com/MatteoLupinacci/PoC4CVEs

https://www.tenable.com/security/research/tra-2025-09

https://github.com/owen2345/camaleon-cms

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS