CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through <= 1.6.
Explanation of Vulnerability in Simple Terms
Verdure versions 1.6 and earlier contain an authorization flaw that allows authenticated users to modify data or disrupt service availability. An attacker with low-level account access can exploit this over the network without user interaction. The vulnerability does not expose sensitive information but can compromise data integrity and site stability.
What an attacker can do
Modify site data or cause temporary unavailability with a low-privilege account.
Potential impact on your site
Authenticated users can alter content or trigger denial-of-service conditions without proper permission checks.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
