CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through < 2.2.0.
Explanation of Vulnerability in Simple Terms
Melapress File Monitor versions 2.2.0 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or disable file monitoring functionality. An attacker with a basic user account can alter the integrity of monitored files or disrupt availability of the monitoring system without requiring administrative permissions.
What an attacker can do
Modify or disable file monitoring, or alter monitored file integrity, using a low-privilege user account.
Potential impact on your site
File integrity monitoring can be bypassed or disabled by non-admin users, reducing your ability to detect unauthorized changes.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
