CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Özgür KARALAR Kargo Takip kargo-takip-turkiye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kargo Takip: from n/a through < 0.2.4.
Explanation of Vulnerability in Simple Terms
Kargo Takip versions 0.2.4 and earlier lack proper authorization checks, allowing authenticated users to read sensitive data they should not access. An attacker with a low-privilege account can view confidential information without additional interaction. The vulnerability affects the application's data access controls but does not allow modification or system disruption.
What an attacker can do
Read sensitive data belonging to other users or restricted areas of the application.
Potential impact on your site
User data and confidential information may be exposed to unauthorized account holders.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the application.
Key dates
External resources
Related vulnerabilities
