CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0.
Explanation of Vulnerability in Simple Terms
The QR code MeCard/vCard generator through version 1.6.0 lacks proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with low-level account privileges can alter records without proper permission validation. The vulnerability affects data integrity but does not expose sensitive information or disrupt availability.
What an attacker can do
Modify data belonging to other users or restricted records without proper authorization.
Potential impact on your site
Unauthorized users can alter QR code records and vCard data, compromising data integrity and trust.
Conditions required to exploit
Attacker must have a low-privilege account on the system; no user interaction required.
Key dates
External resources
Related vulnerabilities
