CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Notification: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Simple Notification versions 1.3 and earlier lack proper authorization checks, allowing authenticated users to perform actions they should not have access to. The vulnerability requires user interaction and can affect confidentiality, integrity, and availability across the application scope. Update to a version newer than 1.3 to remediate.
What an attacker can do
Perform unauthorized actions affecting data confidentiality, integrity, and availability within the application.
Potential impact on your site
Authenticated users could bypass access controls and perform actions outside their intended permissions, risking data exposure or modification.
Conditions required to exploit
Attacker must have a low-privilege user account and trick a user into clicking a malicious link or visiting a crafted page.
Key dates
External resources
Related vulnerabilities
