CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Mask: from n/a through <= 1.8.5.3.
Explanation of Vulnerability in Simple Terms
Content Mask versions up to 1.8.5.3 contain an authorization flaw that allows high-privilege users to modify data integrity or cause service disruptions. The vulnerability requires administrative access and does not expose confidential information. A patch version has not been publicly identified.
What an attacker can do
A high-privilege user can modify site data or cause temporary service interruptions.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can alter content or disrupt availability.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
