CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in briarinc Anything Order by Terms anything-order-by-terms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Anything Order by Terms: from n/a through <= 1.4.0.
Explanation of Vulnerability in Simple Terms
Anything Order by Terms versions 1.4.0 and earlier lack proper authorization checks, allowing authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter order information or related records without restriction. The vulnerability affects the integrity of order data but does not expose sensitive information or cause service disruption.
What an attacker can do
Modify order data or records without proper authorization checks.
Potential impact on your site
Order data integrity is at risk; low-privilege users can alter orders they should not access.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
