CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HappyFiles Pro: from n/a through 1.8.1.
Explanation of Vulnerability in Simple Terms
HappyFiles Pro versions up to 1.8.1 lack proper authorization checks, allowing authenticated users with low privileges to disrupt site availability. An attacker can trigger a denial-of-service condition affecting the entire application. The vulnerability requires a valid user account but no special interaction from victims.
What an attacker can do
Disrupt site availability and cause the application to become unavailable to all users.
Potential impact on your site
Your site may become unavailable to visitors if an authenticated user exploits this flaw.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges; no victim interaction needed.
Key dates
External resources
Related vulnerabilities
