CVE-2025-55041
Last modified
CVE-2025-55041 is a high-severity vulnerability rated 8/10 on the CVSS scale. MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any user to any group without proper authorization checks. The vulnerable function lacks CSRF token validation and directly processes user-supplied userId and groupId parameters via getUserManager().createUserInGorup(), enabling malicious websites to forge requests that automatically execute when an authenticated administrator visits a crafted page. EPSS estimates a 0.13% chance of exploitation in the next 30 days.
Description
MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any user to any group without proper authorization checks. The vulnerable function lacks CSRF token validation and directly processes user-supplied userId and groupId parameters via getUserManager().createUserInGorup(), enabling malicious websites to forge requests that automatically execute when an authenticated administrator visits a crafted page. Adding a user to the Super Admins group (s2 user) is not possible. Successful exploitation results in the attacker gaining privilege escalation both horizontally to other groups and vertically to the admin group. Escalation to the s2 User group is not possible.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Murasoftware | Mura Cms | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-55041?
How severe is CVE-2025-55041?
How do I fix CVE-2025-55041?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-55036When BIG-IP SSL Orchestrator explicit forward proxy is confi…8.7
- CVE-2025-55037Improper neutralization of special elements used in an OS co…9.8
- CVE-2025-55038An authorization bypass vulnerability has been discovered in…7.6
- CVE-2025-55039This issue affects Apache Spark versions before 3.4.4, 3.5.…6.5
- CVE-2025-5504A vulnerability has been found in TOTOLINK X2000R 1.0.0-B202…6.3
- CVE-2025-55040The import form CSRF vulnerability in MuraCMS through 10.1.1…8.8
- CVE-2025-55043MuraCMS through 10.1.10 contains a CSRF vulnerability in the…6.5
- CVE-2025-55044The Trash Restore CSRF vulnerability in MuraCMS through 10.1…8.8
- CVE-2025-55045The update address CSRF vulnerability in MuraCMS through 10.…7.1
- CVE-2025-55046MuraCMS through 10.1.10 contains a CSRF vulnerability that a…8.1
- CVE-2025-55047CWE-798 Use of Hard-coded Credentials8.4
- CVE-2025-55048Multiple CWE-789.8
Are you affected by CVE-2025-55041?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST