CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0.
Explanation of Vulnerability in Simple Terms
CoSchedule versions 3.4.0 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data through network requests. No authentication or user interaction is required to exploit this vulnerability. The integrity of stored information can be compromised, though confidentiality and availability are not directly affected.
What an attacker can do
Modify data in CoSchedule without authentication.
Potential impact on your site
Unauthorized changes to CoSchedule data, schedules, or configurations without user action.
Conditions required to exploit
Network access to the CoSchedule instance; no authentication required.
Key dates
External resources
Related vulnerabilities
