CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through <= 4.0.7.
Explanation of Vulnerability in Simple Terms
Ashish AI Tools versions 4.0.7 and earlier lack proper authorization checks, allowing authenticated users to disrupt service availability. An attacker with low-level credentials can trigger a denial-of-service condition without user interaction. The vulnerability affects the application's availability but not data confidentiality or integrity.
What an attacker can do
Disrupt service availability by making the application unresponsive or unavailable.
Potential impact on your site
Users may experience service outages or degraded performance if an authenticated attacker exploits this flaw.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges; no user interaction required.
Key dates
External resources
