Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
sergejey/majordomo
master @ d1283ab
17
Fixes
0
CVEs
CRITICAL
Peak severity
30.8%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
modules/saverestore/saverestore.class.php: most-fixed (2 issues). Treat as high-risk during review.
13 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass / Access Control: Multiple endpoints lacked authentication or used weak checks (plaintext password, username-only session), allowing unauthorized access and control. The saverestore RCE was unauthenticated, enabling supply-chain compromise.
Command Injection / RCE: The saverestore module had both an unauthenticated RCE via update functions and a command injection sink in exec with insufficient sanitization. This module is a high-value target for attackers.
Path Traversal: Path traversal in file download and file manager operations could allow reading/writing arbitrary files. The elFinder dependency also had known RCE implications.