CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through <= 2.5.1.
Explanation of Vulnerability in Simple Terms
Struktur versions up to 2.5.1 contain an authorization flaw that allows authenticated users to modify or disable site functionality. An attacker with low-level account access can alter settings or data without proper permission checks. The vulnerability does not expose sensitive information but can disrupt site operations or degrade functionality.
What an attacker can do
Modify site settings or data without proper authorization.
Potential impact on your site
Authenticated users can alter site configuration or content, potentially disrupting operations.
Conditions required to exploit
Attacker must have a low-privilege account on the site.
Key dates
External resources
Related vulnerabilities
