CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Mateusz Czardybon Justified Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justified Gallery: from n/a through 1.7.3.
Explanation of Vulnerability in Simple Terms
Justified Gallery through version 1.7.3 fails to properly check user permissions before allowing modifications to gallery settings. An authenticated user with low privileges can alter gallery configuration without proper authorization checks. This affects the integrity of gallery data but does not expose sensitive information or disrupt availability.
What an attacker can do
Modify gallery settings or configuration without proper authorization.
Potential impact on your site
Unauthorized users can alter gallery configurations, potentially defacing or misconfiguring galleries.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
