Authenticated privilege escalation via unchecked role update

Privilege escalation in Cockpit CMS before 2.3.8 allows remote authenticated users to assign themselves an unauthorized role. The Users controller save method writes the submitted role to system/users without checking the app/users/manage permission. Any authenticated account able to save its profile can gain the permissions of the chosen role, including administrative access.