CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Widget Sidebar: from n/a through <= 1.2.3.
Explanation of Vulnerability in Simple Terms
Dashboard Widget Sidebar versions 1.2.3 and earlier lack proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter widget configurations or sidebar settings without proper permission validation. This affects the integrity of dashboard customization across the site.
What an attacker can do
Modify dashboard widgets or sidebar settings belonging to other users or the site.
Potential impact on your site
Users' dashboard customizations can be altered by other authenticated users without authorization.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
