CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through <= 1.1.3.
Explanation of Vulnerability in Simple Terms
HivePress Claim Listings versions 1.1.3 and earlier lack proper authorization checks, allowing authenticated users to modify listings they should not have access to. An attacker with a low-privilege account can alter listing data without permission. The vulnerability affects the integrity of listing information but does not expose sensitive data or disrupt availability.
What an attacker can do
Modify listings belonging to other users without authorization.
Potential impact on your site
Listing data can be altered by unauthorized users, compromising data integrity and user trust.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
