CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through <= 4.1.22.
Explanation of Vulnerability in Simple Terms
Google XML Sitemaps through version 4.1.22 lacks proper authorization checks, allowing unauthenticated attackers to modify sitemap data over the network. The vulnerability requires no user interaction and affects the integrity of sitemap content. Site administrators should update to a version newer than 4.1.22 to restore proper access controls.
What an attacker can do
Modify sitemap content without authentication.
Potential impact on your site
Attackers can alter your XML sitemaps, potentially affecting search engine indexing and SEO.
Conditions required to exploit
Network access; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
