CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.
Explanation of Vulnerability in Simple Terms
Business Directory versions 6.4.19 and earlier lack proper authorization checks, allowing high-privilege users to cause service disruptions. An authenticated administrator or editor can trigger a denial-of-service condition by exploiting missing access controls. The vulnerability requires administrative-level credentials and does not affect data confidentiality or integrity. Update to a version newer than 6.4.19.
What an attacker can do
Cause the site to become unavailable or unresponsive (denial of service).
Potential impact on your site
Site administrators or editors can accidentally or maliciously make the directory unavailable to visitors.
Conditions required to exploit
Attacker must have high-privilege account access (administrator or editor role).
Key dates
External resources
Related vulnerabilities
