CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in gtekelis Interactive Page Hierarchy interactive-page-hierarchy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Interactive Page Hierarchy: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Interactive Page Hierarchy versions 1.0.1 and earlier lack proper authorization checks. An authenticated user with low privileges can trigger a denial-of-service condition by making network requests that exhaust server resources. The vulnerability does not affect data confidentiality or integrity, only availability.
What an attacker can do
Make the site unavailable by exhausting server resources through repeated requests.
Potential impact on your site
Site may become slow or unresponsive if an authenticated user exploits this flaw.
Conditions required to exploit
Attacker must have a low-privilege authenticated account; no user interaction required.
Key dates
External resources
Related vulnerabilities
