CVE-2021-43835: Privilege escalation in the Sulu Admin panel
Sulu is an open-source PHP content management system based on the Symfony framework. In affected versions Sulu users who have access to any subset of the admin UI are able to elevate their privilege. Over the API it was possible for them to give themselves permissions to areas which they did not already had. This issue was introduced in 2.0.0-RC1 with the new ProfileController putAction. The versions have been patched in 2.2.18, 2.3.8 and 2.4.0. For users unable to upgrade the only known workaround is to apply a patch to the ProfileController manually.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-43835?
CVE-2021-43835 is a vulnerability in the Sulu PHP content management system that allows users to elevate their privilege and gain unauthorized permissions.
How severe is CVE-2021-43835?
CVE-2021-43835 has a severity rating of 7.2 (high).
How does CVE-2021-43835 affect Sulu?
CVE-2021-43835 affects Sulu versions 2.0.0 to 2.2.18, 2.3.0 to 2.3.8, and 2.4.0-rc1.
How can this vulnerability be exploited?
The vulnerability can be exploited by Sulu users with access to the admin UI who can give themselves unauthorized permissions over the API.
Is there a fix available for CVE-2021-43835?
Yes, a fix for CVE-2021-43835 has been released. It is recommended to update to the latest version of Sulu.