CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited Timeline: from n/a through < 1.6.1.
Explanation of Vulnerability in Simple Terms
Unlimited Timeline versions 1.6.1 and earlier lack proper authorization checks, allowing unauthenticated attackers to read sensitive data over the network. The vulnerability requires no user interaction and affects confidentiality but not integrity or availability. Administrators should update to a version newer than 1.6.1 as soon as a patch is available.
What an attacker can do
Read sensitive data from the application without authentication.
Potential impact on your site
Sensitive information may be exposed to anyone on the internet without requiring a login.
Conditions required to exploit
Network access to the affected application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
