CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LearnPress: from n/a through 4.2.6.8.2.
Explanation of Vulnerability in Simple Terms
LearnPress versions up to 4.2.6.8.2 contain a denial-of-service vulnerability that allows authenticated users to disrupt site availability. An attacker with low-level account access can trigger resource exhaustion or service interruption without user interaction. The vulnerability does not affect data confidentiality or integrity. Update to a version newer than 4.2.6.8.2 to resolve this issue.
What an attacker can do
Disrupt site availability or cause service interruption through resource exhaustion.
Potential impact on your site
Authenticated users can make your site slow or unavailable, affecting all visitors.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
