CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Referral Link Tracker: from n/a through <= 1.1.4.
Explanation of Vulnerability in Simple Terms
Referral Link Tracker versions 1.1.4 and earlier lack proper authorization checks, allowing authenticated users to disrupt the service's availability. An attacker with low-level account access can trigger a denial-of-service condition without user interaction. The vulnerability affects the application's ability to remain operational but does not expose sensitive data or allow unauthorized modifications.
What an attacker can do
Disrupt service availability by making the application unresponsive or unavailable.
Potential impact on your site
Legitimate users may experience service interruptions or downtime if an authenticated attacker exploits this flaw.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
