CVE-2025-54875: Freshrss Unprotected New User Is Admin Param
The privilege-elevating request parameter 'new_user_is_admin' is read without first checking that the caller has admin privileges. Because the same createAction() endpoint is reachable from the public registration flow, an unauthenticated attacker can submit this hidden parameter and self-register as an administrator (CVE-2025-54875 / CWE-284). Gate the read
greprules fetch cve-2025-54875-freshrss-unprotected-new-user-is-admin-param --engine opengrepDescription
The privilege-elevating request parameter 'new_user_is_admin' is read without first checking that the caller has admin privileges. Because the same createAction() endpoint is reachable from the public registration flow, an unauthenticated attacker can submit this hidden parameter and self-register as an administrator (CVE-2025-54875 / CWE-284). Gate the read
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.