CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Newsletter Signups: from n/a through 1.0.4.
Explanation of Vulnerability in Simple Terms
Easy Newsletter Signups versions up to 1.0.4 lack proper authorization checks, allowing unauthenticated attackers to read and modify newsletter subscription data over the network. The vulnerability requires no user interaction and affects the confidentiality and integrity of subscriber information. A patch version has not been publicly identified.
What an attacker can do
Read and modify newsletter subscription data without authentication.
Potential impact on your site
Subscriber email lists and preferences can be accessed and altered by unauthorized parties.
Conditions required to exploit
Network access to the affected application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
