CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.03.
Explanation of Vulnerability in Simple Terms
Download Manager versions 3.3.03 and earlier lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker can make repeated requests to exhaust server resources or disrupt service availability. The vulnerability requires valid login credentials but no special user role.
What an attacker can do
Disrupt site availability by making the site unresponsive or slow through resource exhaustion.
Potential impact on your site
Site may become slow or unavailable if an authenticated user repeatedly exploits this flaw.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
