CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculated Fields Form: from n/a through <= 5.4.4.1.
Explanation of Vulnerability in Simple Terms
Calculated Fields Form versions up to 5.4.4.1 lack proper authorization checks, allowing authenticated users to access sensitive data they should not be able to view. An attacker with a low-privilege account can read confidential information without modifying or disrupting the site. Update to a version newer than 5.4.4.1 to resolve this issue.
What an attacker can do
Read sensitive data and information they are not authorized to access.
Potential impact on your site
User data and confidential form information may be exposed to unauthorized account holders.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
