CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.
Explanation of Vulnerability in Simple Terms
Envira Photo Gallery versions up to 1.8.14 lack proper authorization checks, allowing authenticated users with low privileges to access sensitive information they should not be able to view. An attacker with a basic user account can read data that should be restricted to administrators or higher-privileged roles. This affects confidentiality but not data integrity or availability.
What an attacker can do
Read sensitive information restricted to higher-privileged users.
Potential impact on your site
Unauthorized users can access restricted gallery data or settings.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
