CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in anibalwainstein Effect Maker effect-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Effect Maker: from n/a through <= 1.2.1.
Explanation of Vulnerability in Simple Terms
Effect Maker versions up to 1.2.1 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can change data integrity without needing special interaction. The vulnerability affects the application's ability to enforce role-based access controls.
What an attacker can do
Modify or alter data in the application without proper authorization.
Potential impact on your site
Unauthorized users can alter application data, compromising content integrity and trust.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the system.
Key dates
External resources
