CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through <= 2.0.21.
Explanation of Vulnerability in Simple Terms
Market Exporter versions up to 2.0.21 lack proper authorization checks, allowing authenticated users with low privileges to modify or disable site functionality. An attacker with a basic user account can alter data integrity or disrupt service availability without requiring administrative permissions. Update to a version newer than 2.0.21 to resolve this issue.
What an attacker can do
Modify site data or disrupt availability using a low-privilege user account.
Potential impact on your site
Unauthorized users can alter content or cause service disruptions without admin access.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
