CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.
Explanation of Vulnerability in Simple Terms
Backpack Traveler through version 2.10.3 contains a vulnerability allowing authenticated users with low privileges to modify site data or cause service disruptions. An attacker with a basic user account can alter content or temporarily disable functionality without requiring user interaction. The vulnerability affects the integrity and availability of the site.
What an attacker can do
Modify site data or cause temporary service disruptions with a low-privilege user account.
Potential impact on your site
Unauthorized changes to site content or temporary unavailability of features by compromised low-privilege accounts.
Conditions required to exploit
Attacker must have a valid low-privilege user account; no user interaction required.
Key dates
External resources
Related vulnerabilities
