CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Sully Media Library File Size media-library-file-size allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library File Size: from n/a through <= 1.6.7.
Explanation of Vulnerability in Simple Terms
The Media Library File Size plugin for Sully contains an authorization flaw that allows authenticated users with low privileges to modify file metadata or settings they should not have access to. The vulnerability affects versions up to 1.6.7. An attacker needs a valid user account to exploit it. Site administrators should update to a version newer than 1.6.7 when available.
What an attacker can do
Modify file metadata or library settings without proper authorization checks.
Potential impact on your site
Unauthorized users can alter media library configurations or file properties, potentially disrupting content management workflows.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
