Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. The project was archived as of December 1, 2023.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-67165US | — | — | ||
An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67165WEB
- https://github.com/pagekit/docs/blob/develop/user-interface/users.md#permissionsWEB
- https://github.com/pagekit/docs/blob/develop/user-interface/users.md#rolesWEB
- https://github.com/pagekit/pagekitPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2025-67165ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan