CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through <= 2.1.3.
Explanation of Vulnerability in Simple Terms
Social Media Feather versions 2.1.3 and earlier lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter data through the application's API or interface without additional restrictions. This affects the integrity of user-generated content and site data.
What an attacker can do
Modify or alter content and data they should not have permission to change.
Potential impact on your site
Unauthorized users can tamper with site content, user data, or settings depending on what the application exposes.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
