Privilege Escalation due to Blind NoSQL Injection in flintcms

Description

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset.

Recommendation

Update the flintcms package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.1.10
• Patched version(s): 1.1.10

References

• GHSA-jhq3-57xh-6643
• hackerone.com
• www.npmjs.com
• CVE-2018-3783
• CWE-89
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Code Injection in cryo - CVE-2018-3784
• Command Injection in macaddress (GHSA-pp57-mqmh-44h7) - CVE-2018-13797
• auth0-js Privilege Escalation Vulnerability - CVE-2017-17068
• mongosh vulnerable to local privilege escalation - CVE-2025-1756

Tags:

npm

flintcms