Squiz Matrix CMS Authenticated Privilege Escalation through IDOR

During a recent engagement, Trustwave SpiderLabs discovered an Indirect Object Reference (IDOR) vulnerability within Squiz Matrix CMS which would allow any low privileged user to change the contact details of any other user on a Squiz Matrix instance (including administrators).

cms escalation idor matrix privilege privilege escalation