CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Shopify Product: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
Smart Shopify Product versions up to 1.0.2 lack proper authorization checks, allowing authenticated users to disrupt service availability. An attacker with low-level access can trigger a denial-of-service condition without user interaction. The vulnerability affects the product's core functionality and requires an active user account to exploit.
What an attacker can do
Disrupt service availability by making the site unresponsive or unavailable.
Potential impact on your site
Your site may become slow or unavailable if an authenticated user exploits this flaw.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
