CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a through <= 6.2.5.
Explanation of Vulnerability in Simple Terms
RumbleTalk Live Group Chat versions 6.2.5 and earlier lack proper authorization checks, allowing authenticated users to modify or disrupt chat functionality they should not access. An attacker with a low-privilege account can alter chat settings or availability without proper permission validation. Update to a version newer than 6.2.5 to resolve this issue.
What an attacker can do
Modify or disrupt chat settings and functionality without proper authorization.
Potential impact on your site
Unauthorized users can alter chat configurations, potentially disrupting service or exposing chat features to unintended audiences.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
