CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3.
Explanation of Vulnerability in Simple Terms
ProfileGrid versions up to 5.0.3 lack proper authorization checks, allowing authenticated users to read, modify, or delete data they should not have access to. An attacker with a low-privilege account can exploit this to view or alter other users' information or disrupt site functionality. Update to a version newer than 5.0.3 to resolve this issue.
What an attacker can do
Read, modify, or delete data belonging to other users or the site.
Potential impact on your site
User data may be exposed, altered, or deleted by unauthorized accounts; member privacy and data integrity are at risk.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
