CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.
Explanation of Vulnerability in Simple Terms
Contest Gallery versions 28.1.2.2 and earlier contain an authentication bypass vulnerability. An attacker can gain full control of the application without valid credentials, reading sensitive data, modifying content, and disrupting service. The vulnerability requires only network access and no user interaction. Immediate patching is critical.
What an attacker can do
Gain unauthorized access to the entire application and read, modify, or delete any data without credentials.
Potential impact on your site
Complete compromise of the application and all user data; attackers can impersonate administrators and modify or delete content.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
