CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maspik – Spam blacklist: from n/a through 0.10.3.
Explanation of Vulnerability in Simple Terms
Maspik – Spam blacklist versions up to 0.10.3 contain an authentication bypass vulnerability. An attacker can modify data without authentication by sending network requests with low complexity. The vulnerability affects the integrity of the spam blacklist but does not expose sensitive information or disrupt availability. Update to a version newer than 0.10.3.
What an attacker can do
Modify spam blacklist data without authentication.
Potential impact on your site
Attackers can alter spam blacklist entries, potentially allowing spam to bypass filtering or blocking legitimate traffic.
Conditions required to exploit
Network access; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
