CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hive Support: from n/a through <= 1.2.5.
Explanation of Vulnerability in Simple Terms
Hive Support versions 1.2.5 and earlier lack proper authorization checks, allowing authenticated users to disrupt service availability. An attacker with low-level access can trigger a denial-of-service condition without requiring user interaction. The vulnerability affects the core functionality and does not expose sensitive data.
What an attacker can do
Disrupt service availability by making the site unresponsive or unavailable.
Potential impact on your site
Legitimate users may experience service outages or degraded performance if an authenticated attacker exploits this flaw.
Conditions required to exploit
Attacker must have a low-privilege account or login credentials on the site.
Key dates
External resources
