CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Twitch Player: from n/a through <= 2.1.3.
Explanation of Vulnerability in Simple Terms
Twitch Player versions 2.1.3 and earlier lack proper authorization checks, allowing unauthenticated attackers to disrupt service availability. An attacker can send network requests without authentication to trigger a denial-of-service condition. No user interaction is required. Update to a version newer than 2.1.3.
What an attacker can do
Disrupt the Twitch Player service by sending unauthenticated requests that consume resources or crash the component.
Potential impact on your site
The Twitch Player may become unavailable or unresponsive to legitimate users during an attack.
Conditions required to exploit
Network access to the Twitch Player component; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
