Featherpanel
Monthly
Privilege escalation in FeatherPanel before v1.3.7.10 permits any authenticated subuser to rewrite their own permission record via the `SubuserController::updateSubuser` handler, immediately gaining full server control. The root cause (CWE-862 Missing Authorization) is confirmed by the fix commit, which adds `USER_UPDATE` permission enforcement, a self-modification block, and whitelist validation of permission names - none of which existed in the vulnerable code path. No public exploit code has been independently confirmed, but the VulnCheck advisory and commit diff together provide sufficient technical detail to reconstruct the attack.
Privilege escalation in FeatherPanel before v1.3.7.10 permits any authenticated subuser to rewrite their own permission record via the `SubuserController::updateSubuser` handler, immediately gaining full server control. The root cause (CWE-862 Missing Authorization) is confirmed by the fix commit, which adds `USER_UPDATE` permission enforcement, a self-modification block, and whitelist validation of permission names - none of which existed in the vulnerable code path. No public exploit code has been independently confirmed, but the VulnCheck advisory and commit diff together provide sufficient technical detail to reconstruct the attack.