CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ModelTheme Framework: from n/a through < 2.0.0.
Explanation of Vulnerability in Simple Terms
The ModelTheme Framework through version 2.0.0 lacks proper authorization checks, allowing unauthenticated attackers to read sensitive data. An attacker can access confidential information without needing valid credentials or user interaction. This affects all installations of the framework up to and including version 2.0.0.
What an attacker can do
Read sensitive data without authentication.
Potential impact on your site
Confidential data may be exposed to anyone on the internet without requiring a login.
Conditions required to exploit
Network access to the affected framework; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
