Executive brief
Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
Affected products
- RubyGems camaleon_cms
Junglewise Threat Intelligence
CVE-2025-2304: Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
CVE-2025-2304 · Severity: medium · CVSS 4 · Published 2025-03-14
Technologies: camaleon_cms (RubyGems). Vendors: RubyGems.
Related threats
- Camaleon CMS path traversal in AWS S3 uploader
- camaleon_cms affected by cross site scripting
- Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
- Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)
- Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)