MRCMS 3.1.2 contains an access control vulnerability. The save() method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Wuweiit |
|
No data.
No data.
References
History
Thu, 09 Apr 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Wuweiit
Wuweiit mushroom |
|
| Vendors & Products |
Wuweiit
Wuweiit mushroom |
Wed, 08 Apr 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Access Control Bypass Allowing Creation of Super Administrator Accounts in MRCMS 3.1.2 | |
| Weaknesses | CWE-284 |
Tue, 07 Apr 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | MRCMS 3.1.2 contains an access control vulnerability. The save() method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-04-07T00:00:00.000Z
Updated: 2026-04-07T17:08:09.932Z
Reserved: 2026-03-09T00:00:00.000Z
Link: CVE-2026-31272
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-04-07T18:16:41.143
Modified: 2026-04-08T21:27:00.663
Link: CVE-2026-31272
Redhat
No data.