CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through <= 1.2.8.
Explanation of Vulnerability in Simple Terms
JobBoard Job Listing versions up to 1.2.8 contain an authorization flaw that allows high-privileged users to modify data they should not have access to. The vulnerability requires an authenticated admin or manager account to exploit. No confidentiality or availability impact occurs, but data integrity is at risk.
What an attacker can do
Modify or alter job listings and related data without proper authorization checks.
Potential impact on your site
Admins or managers with compromised accounts could alter job postings, affecting job board integrity and user trust.
Conditions required to exploit
Attacker must have high-level admin or manager credentials on the site.
Key dates
External resources
