CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widget Options: from n/a through <= 4.0.6.1.
Explanation of Vulnerability in Simple Terms
Widget Options versions up to 4.0.6.1 lack proper authorization checks, allowing authenticated users with low privileges to disrupt site availability. An attacker with a basic user account can trigger a denial-of-service condition without requiring user interaction. The vulnerability affects the authorization logic that should restrict access to sensitive widget configuration functions.
What an attacker can do
An authenticated user can disrupt site availability by exploiting missing authorization checks.
Potential impact on your site
Site availability may be disrupted by authenticated users with basic accounts exploiting authorization gaps.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
