Listen to this Post
How the CVE Works:
The vulnerability exists in the `/api/V2/pp_udfv_admin` endpoint of Primakon Pi Portal version 1.0.18. This endpoint implements a user impersonation feature, typically an administrative function. Due to Broken Function Level Authorization (BFLA), the server-side code fails to verify the privilege level of the calling user before processing a PATCH request. An attacker who is any authenticated user, even with low privileges, can send a direct PATCH request to this endpoint. The request only needs to contain the ’email’ parameter of the target user to be impersonated, as the design does not require the target’s password or an administrative session token. This allows the attacker to hijack the session and privileges of any other user, including application administrators, leading to a full system compromise.
DailyCVE Form:
Platform: Primakon Pi Portal
Version: 1.0.18
Vulnerability: User Impersonation Exploit
Severity: Critical
Date: 2025-11-25
Prediction: Patch by 2025-12-15
What Undercode Say:
Analytics:
curl -X PATCH 'https://<target>/api/V2/pp_udfv_admin' -H 'Authorization: Bearer <low_priv_token>' -H 'Content-Type: application/json' --data '{"email":"[email protected]"}'
grep -r "pp_udfv_admin" /var/www/pi_portal/ cat /app/routes/v2_admin.py | grep -A 10 "PATCH.pp_udfv_admin"
How Exploit:
1. Attacker obtains low-privilege user credentials.
2. Authenticates to obtain a valid JWT/session token.
- Crafts a direct HTTP PATCH request to the vulnerable endpoint with an admin email.
- The server returns a session for the targeted admin user.
- Attacker uses the hijacked session for full administrative access.
Protection from this CVE:
Implement proper authorization checks.
Require admin token for impersonation.
Add multi-factor authentication for sensitive functions.
Apply input validation and rate limiting.
Upgrade to patched version immediately.
Impact:
Complete privilege escalation.
Unauthorized data access and modification.
Total system compromise.
Bypass of all security controls.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
