CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: from n/a through <= 1.87.
Explanation of Vulnerability in Simple Terms
The 1003 Mortgage Application contains a missing authorization flaw that allows authenticated users to modify data they should not have access to. An attacker with a low-privilege account can change information without proper permission checks. The vulnerability affects all versions up to 1.87. Update to a version newer than 1.87 to remediate.
What an attacker can do
Modify mortgage application data or settings without proper authorization.
Potential impact on your site
Unauthorized changes to mortgage applications or sensitive data by low-privilege users.
Conditions required to exploit
Attacker must have a low-privilege user account on the application.
Key dates
External resources
Related vulnerabilities
