CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through <= 3.5.1.
Explanation of Vulnerability in Simple Terms
Filter & Grids versions 3.5.1 and earlier lack proper access controls, allowing unauthenticated attackers to read sensitive information over the network. The vulnerability requires no user interaction and affects confidentiality. Site administrators should update to a version newer than 3.5.1 to remediate the issue.
What an attacker can do
Read sensitive information without authentication.
Potential impact on your site
Unauthorized users can access confidential data exposed by the Filter & Grids component.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
