CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.3.
Explanation of Vulnerability in Simple Terms
New User Approve versions 3.2.3 and earlier lack proper authorization checks, allowing authenticated users to trigger a denial-of-service condition. An attacker with low-level site access can exhaust server resources or crash the application without requiring user interaction. Site administrators should update to a version newer than 3.2.3 to restore availability.
What an attacker can do
Authenticated user can make the site unavailable or unresponsive by exploiting missing authorization.
Potential impact on your site
Site may become unavailable or slow; users cannot access the site until the attack stops or is mitigated.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
