CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Houzez: from n/a through <= 4.2.5.
Explanation of Vulnerability in Simple Terms
Houzez versions 4.2.5 and earlier contain an authorization flaw that allows authenticated users to cause a denial of service by disrupting site availability. An attacker with low-level account access can trigger the vulnerability without user interaction. The issue affects the availability of the site but does not expose or modify data.
What an attacker can do
An authenticated attacker can disrupt site availability and cause a denial of service.
Potential impact on your site
Site availability can be disrupted by users with basic account access; data confidentiality and integrity are not at risk.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
