CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in mrityunjay Smart WeTransfer smart-wetransfer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WeTransfer: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Smart WeTransfer versions 1.3 and earlier lack proper authorization checks, allowing authenticated users to degrade service availability. An attacker with low-level access can trigger a denial-of-service condition affecting the application's availability. The vulnerability requires valid user credentials but no special privileges to exploit.
What an attacker can do
Degrade or disrupt the service's availability by making unauthorized requests.
Potential impact on your site
Authenticated users can cause service disruptions or downtime affecting other users.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges.
Key dates
External resources
Related vulnerabilities
