CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.
Explanation of Vulnerability in Simple Terms
Ultimate Dashboard versions up to 3.7.10 expose sensitive information due to improper access controls. An attacker on the network can retrieve limited confidential data without authentication, though the attack requires specific conditions to succeed. The exposure is limited to information disclosure with no impact on data integrity or availability.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Confidential data may be exposed to unauthenticated attackers, depending on what information the dashboard stores.
Conditions required to exploit
Network access; specific conditions must be met to trigger the vulnerability.
Key dates
External resources
Related vulnerabilities
