CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publisher: from n/a through <= 1.0.6.
Explanation of Vulnerability in Simple Terms
ContentMX Content Publisher versions 1.0.6 and earlier lack proper authorization checks, allowing authenticated users to modify or delete content they should not have access to. An attacker with a low-privilege account can change or remove data belonging to other users or restricted areas. The vulnerability requires valid login credentials but no additional user interaction.
What an attacker can do
Modify or delete content and data belonging to other users or restricted areas.
Potential impact on your site
Unauthorized content modification or deletion by authenticated users; data integrity compromised without admin action.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the ContentMX instance.
Key dates
External resources
