CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through <= 1.4.6.
Explanation of Vulnerability in Simple Terms
Arabic Webfonts versions 1.4.6 and earlier lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a basic user account can make requests that degrade site availability. The vulnerability requires valid login credentials but no special interaction from other users.
What an attacker can do
Authenticated user can degrade site availability by making requests that consume resources.
Potential impact on your site
Site availability may be impacted if a low-privilege user account is compromised or misused.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
