CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Reviews: from n/a through <= 3.2.16.
Explanation of Vulnerability in Simple Terms
Ultimate Reviews versions 3.2.16 and earlier contain an authorization flaw that exposes sensitive information. An unauthenticated attacker on the network can read restricted data without user interaction. The vulnerability affects confidentiality but not data integrity or availability. Update to a version newer than 3.2.16 to remediate.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Visitor data or configuration details may be exposed to unauthenticated users.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
