CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Hossein Material Dashboard material-dashboard allows Authentication Bypass.This issue affects Material Dashboard: from n/a through <= 1.4.5.
Explanation of Vulnerability in Simple Terms
Material Dashboard versions up to 1.4.5 contain an authentication bypass vulnerability. An attacker can gain full access to the application without valid credentials, compromising confidentiality, integrity, and availability. The vulnerability requires no user interaction and is exploitable over the network. Immediate patching is critical.
What an attacker can do
Gain unauthorized access to the application and read, modify, or delete any data without authentication.
Potential impact on your site
Complete compromise of the application; attackers can access all user data, modify content, and disrupt service availability.
Conditions required to exploit
Network access to the affected Material Dashboard instance; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
