CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Ella Van Durpe Slides & Presentations slide allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slides & Presentations: from n/a through <= 0.0.39.
Explanation of Vulnerability in Simple Terms
Slides & Presentations versions 0.0.39 and earlier lack proper authorization checks, allowing authenticated users to modify or disable content they should not have access to. An attacker with low-level account privileges can alter presentation data or availability without proper permission validation. Update to a version newer than 0.0.39 to resolve this issue.
What an attacker can do
Modify or disable presentations belonging to other users or the site.
Potential impact on your site
Authenticated users can tamper with presentations they don't own, risking data loss or service disruption.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
