The vulnerability is located in the crop operation of the Media Crop Handler in Camaleon CMS. By manipulating the saved_avatar argument, an attacker can bypass the authorization checks that normally restrict access to the cropping feature, allowing a remote user without proper privileges to trigger media cropping as if they were an authenticated administrator.

Assemblies of owen2345 Camaleon CMS up to and including version 2.9.2 are affected. The flaw resides in app/controllers/camaleon_cms/admin/media_controller.rb. The vendor releases a fix in version 2.9.3 that removes the authorization bypass.

The CVSS score of 5.3 places the issue in the medium severity range, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalogue, indicating no widespread exploitation yet. However, the public exploit code is available and the attack can be launched remotely, so a determined attacker could use it to perform unauthorized media cropping.