CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1.7.
Explanation of Vulnerability in Simple Terms
FiveStar versions 1.7 and earlier contain an authorization flaw that allows authenticated users to modify data or disrupt service. An attacker with low-level account access can alter content or cause the site to become unavailable. No user interaction is required once the attacker is logged in. Update to a version newer than 1.7.
What an attacker can do
Modify site data or cause temporary unavailability after logging in with a low-privilege account.
Potential impact on your site
Authenticated users can tamper with content or disrupt site availability without proper permission checks.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
