CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Missing Authorization vulnerability in Ruhul Amin My Album Gallery my-album-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Album Gallery: from n/a through <= 1.0.4.
Explanation of Vulnerability in Simple Terms
My Album Gallery versions 1.0.4 and earlier lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter or corrupt gallery data without the site owner's permission. Update to a version newer than 1.0.4 to resolve this issue.
What an attacker can do
Modify or corrupt gallery content and data without authorization.
Potential impact on your site
Unauthorized users can alter or delete gallery content, compromising data integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
