CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Google Universal Analytics: from n/a through <= 1.0.3.
Explanation of Vulnerability in Simple Terms
Advanced Google Universal Analytics versions 1.0.3 and earlier fail to properly check user permissions before allowing access to sensitive analytics data. An authenticated user with low privileges can read analytics information they should not have access to. The vulnerability requires a valid user account but no special interaction from the victim.
What an attacker can do
Read analytics data belonging to other users or restricted accounts.
Potential impact on your site
Unauthorized users can access sensitive analytics reports and data they should not see.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
