CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.7.3.
Explanation of Vulnerability in Simple Terms
Envira Photo Gallery versions up to 1.8.7.3 lack proper authorization checks, allowing authenticated users with low privileges to modify gallery content they should not have access to. An attacker with a basic user account can alter or tamper with gallery data without the site owner's permission. Update to a version newer than 1.8.7.3 to resolve this issue.
What an attacker can do
Modify gallery content and settings without proper authorization.
Potential impact on your site
Unauthorized users can alter or delete gallery data, compromising content integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
