CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch wp-jobsearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through < 3.0.6.
Explanation of Vulnerability in Simple Terms
JobSearch versions 3.0.6 and earlier contain a denial-of-service vulnerability accessible to authenticated users. An attacker with low-level account access can trigger a condition that degrades site availability. The vulnerability requires network access and valid credentials but no user interaction. Administrators should update to a version newer than 3.0.6.
What an attacker can do
Degrade or disrupt site availability by triggering a denial-of-service condition.
Potential impact on your site
Authenticated users can cause temporary service disruption affecting site performance or availability.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
