Description
MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any user to any group without proper authorization checks. The vulnerable function lacks CSRF token validation and directly processes user-supplied userId and groupId parameters via getUserManager().createUserInGorup(), enabling malicious websites to forge requests that automatically execute when an authenticated administrator visits a crafted page. Adding a user to the Super Admins group (s2 user) is not possible. Successful exploitation results in the attacker gaining privilege escalation both horizontally to other groups and vertically to the admin group. Escalation to the s2 User group is not possible.
INFO
Published Date :
2026-03-18T00:00:00.000Z
Last Modified :
2026-03-19T13:42:30.193Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-55041 vulnerability.
| Vendors | Products |
|---|---|
| Murasoftware |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-55041.
