CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.2.1.
Explanation of Vulnerability in Simple Terms
Filebird versions up to 6.4.2.1 contain an authorization flaw that allows high-privilege users to read and modify sensitive data. The vulnerability requires administrator-level access and does not affect availability. Update to version 6.5.5 or later to remediate.
What an attacker can do
Read and modify sensitive data within the Filebird component.
Potential impact on your site
Administrators with compromised credentials could leak or alter file metadata and permissions.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
Related vulnerabilities
