Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

modxcms/revolution

              3.x @ 0bed221
            

196

Fixes

CVEs

CRITICAL

Peak severity

25.0%

Coverage

Highlights

Auth Bypass: 54 prior fixes. Scrutinize any change in this area.

core/model/modx/modconnectorresponse.class.php: most-fixed (8 issues). Treat as high-risk during review.

134 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Connector request handling has been patched multiple times for missing authentication, token validation, and CSRF protection; a single missed check can expose all manager processors to unauthenticated access.

Reflected XSS: The manager header reflects the 'a' (action) parameter in script URLs; multiple fixes used different encoding strategies (strip_tags vs htmlspecialchars vs integer cast), indicating incomplete or inconsistent sanitization that could regress.

Path Traversal: File manager processors have been repeatedly patched for path traversal and missing permission checks; the breadth of operations (upload, create, remove, rename) and multiple sanitization approaches create high risk of a sibling operation missing a guard.