Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH requests to the /api/manage/admin/user-group/id endpoint, bypassing intended curator-group assignment checks.
References
| Link | Resource |
|---|---|
| https://github.com/onyx-dot-app/onyx | Product |
| https://github.com/onyx-dot-app/onyx/pull/4714 | Exploit Issue Tracking |
| https://www.gecko.security/blog/cve-2025-51479 | Exploit Third Party Advisory |
Configurations
History
09 Oct 2025, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/onyx-dot-app/onyx - Product | |
| References | () https://github.com/onyx-dot-app/onyx/pull/4714 - Exploit, Issue Tracking | |
| References | () https://www.gecko.security/blog/cve-2025-51479 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:onyx:onyx:0.27.0:*:*:*:enterprise:*:*:* | |
| First Time |
Onyx onyx
Onyx |
25 Jul 2025, 15:29
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
22 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-639 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
22 Jul 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-22 19:15
Updated : 2025-10-09 16:10
NVD link : CVE-2025-51479
Mitre link : CVE-2025-51479
CVE.ORG link : CVE-2025-51479
JSON object : View
Products Affected
onyx
- onyx
CWE
CWE-639
Authorization Bypass Through User-Controlled Key