CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in 10up Autoshare for Twitter autoshare-for-twitter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoshare for Twitter: from n/a through <= 2.3.1.
Explanation of Vulnerability in Simple Terms
Autoshare for Twitter versions 2.3.1 and earlier lack proper authorization checks, allowing authenticated users to modify or delete content they should not have access to. An attacker with a low-privilege account can change settings or disable sharing features for other users. The vulnerability requires an existing user account but no special interaction from victims.
What an attacker can do
Modify or delete sharing settings and content for other users on the site.
Potential impact on your site
Users' Twitter sharing settings could be altered or disabled by other site members without authorization.
Conditions required to exploit
Attacker must have a low-privilege user account; no victim interaction required.
Key dates
External resources
Related vulnerabilities
