zakirkun Business Logic Privilege Escalation
Overview
Privilege escalation through business logic occurs when:
- Role is accepted from client request during registration/update
- Admin endpoints rely on user-submitted role parameter
- User can invite themselves to higher-privilege groups
- Role update logic does not verify the caller's permission to grant that role
Remediation
- Never accept role/permission from client
- Role assignment must be done by admins only, verified server-side
- Log all privilege change events