CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through <= 1.8.2.1.
Explanation of Vulnerability in Simple Terms
Frisbii Pay versions up to 1.8.2.1 lack proper authorization checks, allowing authenticated users with low privileges to disrupt service availability. An attacker with a valid account can trigger a denial-of-service condition without requiring user interaction. The vulnerability affects the payment processing system and may impact site stability.
What an attacker can do
Disrupt service availability by making the payment system unavailable to legitimate users.
Potential impact on your site
Payment processing may become unavailable, affecting transactions and customer experience.
Conditions required to exploit
Attacker must have a valid low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
