CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in falselight Exchange Rates exchange-rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exchange Rates: from n/a through <= 1.2.2.
Explanation of Vulnerability in Simple Terms
Exchange Rates version 1.2.2 and earlier contains an authorization bypass that allows authenticated users to modify data they should not have access to. The vulnerability requires a valid user account but no special privileges. An attacker with low-level access can alter information without proper permission checks.
What an attacker can do
Modify exchange rate data or other protected information without proper authorization.
Potential impact on your site
Authenticated users can tamper with exchange rates or other sensitive data, potentially affecting pricing or financial calculations.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
