CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Nawawi Jamili Docket Cache docket-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Docket Cache: from n/a through <= 24.07.04.
Explanation of Vulnerability in Simple Terms
Docket Cache versions up to 24.07.04 lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a valid account can make requests that degrade site availability. The vulnerability requires an existing user account but no special interaction from victims.
What an attacker can do
An authenticated user can make requests that degrade or disrupt site availability.
Potential impact on your site
Any registered user can trigger availability issues; consider restricting account creation or auditing user permissions.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
