CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kraken.io Image Optimizer: from n/a through 2.6.7.
Explanation of Vulnerability in Simple Terms
Kraken.io Image Optimizer versions up to 2.6.7 lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker can exhaust server resources by making repeated requests that degrade site availability. The vulnerability requires valid login credentials but no special permissions.
What an attacker can do
Degrade site performance or cause temporary unavailability by exhausting server resources.
Potential impact on your site
Legitimate users may experience slow performance or service interruptions if an authenticated attacker exploits this flaw.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
