CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Overton: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Overton versions 1.3 and earlier contain an authorization flaw that allows high-privileged users to read or modify limited data. The vulnerability requires administrative access and does not affect availability. Update to a version newer than 1.3 to remediate.
What an attacker can do
Read or modify limited data within the application with high-level privileges.
Potential impact on your site
High-privilege accounts could leak or alter sensitive information; availability is not affected.
Conditions required to exploit
Attacker must have high-level administrative access to the application.
Key dates
External resources
Related vulnerabilities
