CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through <= 2.2.
Explanation of Vulnerability in Simple Terms
WebP Conversion versions 2.2 and earlier lack proper access controls, allowing unauthenticated attackers to trigger a denial-of-service condition over the network. No user interaction is required. The vulnerability does not affect data confidentiality or integrity, only service availability.
What an attacker can do
Make the service unavailable by sending network requests without authentication.
Potential impact on your site
Service disruptions if WebP Conversion is used in production; attackers can degrade availability without credentials.
Conditions required to exploit
Network access to the affected system; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
