CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justicia: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
Justicia versions 1.2 and earlier contain an authorization flaw that allows high-privileged users to read and modify sensitive data. The vulnerability requires administrative access and does not affect site availability. Update to a version newer than 1.2 to remediate.
What an attacker can do
Read and modify sensitive data within the application.
Potential impact on your site
Administrators with compromised credentials could leak or alter site data without detection.
Conditions required to exploit
Attacker must have high-level administrative privileges on the site.
Key dates
External resources
