Intel

AIKIDO-2025-10112

coolsam/modules is vulnerable to Improper Access Control

Improper Access Control Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Feb 25, 2025

80

High Risk

This Affects:

PHPcoolsam/modules
1.0.0 - 4.0.6
Fixed in 4.1.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package fail to restrict user access when the Module is disabled. As a result, users can still see the Resource and Page in the navigation, even when they should be inaccessible.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

coolsam/modules is vulnerable to Improper Access Control in versions 1.0.0 - 4.0.6.

How to fix this

Upgrade the coolsam/modules library to the patch version.