CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MaxiBlocks: from n/a through <= 2.1.3.
Explanation of Vulnerability in Simple Terms
MaxiBlocks versions up to 2.1.3 lack proper authorization checks, allowing authenticated users with low privileges to access sensitive information they should not see. The vulnerability affects the scope beyond the component itself. No code execution or data modification is possible, but confidential data may be exposed to unauthorized users.
What an attacker can do
Read sensitive information belonging to other users or parts of the site.
Potential impact on your site
Users' private data may be exposed to other authenticated users with lower privilege levels.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
