CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Aarsiv Groups Automated FedEx live/manual rates with shipping labels a2z-fedex-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automated FedEx live/manual rates with shipping labels: from n/a through <= 5.1.9.
Explanation of Vulnerability in Simple Terms
The Automated FedEx live/manual rates with shipping labels plugin for versions up to 5.1.9 lacks proper authorization checks. An unauthenticated attacker can read shipping data, modify rates or labels, and disrupt shipping operations without needing valid credentials or user interaction.
What an attacker can do
Read shipping data, modify rates and labels, and disrupt shipping operations without authentication.
Potential impact on your site
Attackers can access and modify shipping information, potentially causing financial loss and operational disruption.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
