CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fleur fleur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fleur: from n/a through <= 2.0.
Explanation of Vulnerability in Simple Terms
Fleur versions 2.0 and earlier contain a vulnerability allowing authenticated users to modify data or disrupt service. An attacker with low-level account access can alter content or cause the application to become unavailable. The vulnerability requires network access and an existing user account but no additional user interaction.
What an attacker can do
Modify site data or cause temporary unavailability of the application.
Potential impact on your site
Authenticated users can alter content or degrade site performance without authorization.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
