CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 6Storage Rentals: from n/a through <= 2.20.2.
Explanation of Vulnerability in Simple Terms
6Storage Rentals versions up to 2.20.2 lack proper authorization checks, allowing authenticated users to modify or disable features they should not have access to. An attacker with a low-privilege account can alter data integrity or disrupt service availability. Update to a version newer than 2.20.2 to resolve this issue.
What an attacker can do
Modify or disable features and data without proper authorization.
Potential impact on your site
Authenticated users can tamper with rental data or disable critical features.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
