CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through <= 2.5.8.
Explanation of Vulnerability in Simple Terms
The LTL Freight Quotes – Unishippers Edition plugin lacks proper authorization checks, allowing unauthenticated attackers to modify data and disrupt service. An attacker can send network requests without credentials to trigger unauthorized changes. This affects all versions up to 2.5.8. Site owners should update immediately to a patched version.
What an attacker can do
Modify plugin data and disrupt service without logging in.
Potential impact on your site
Unauthorized users can alter freight quotes and availability, damaging customer trust and operations.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
