CVSS base score
What the vulnerability does
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0.
Explanation of Vulnerability in Simple Terms
A missing authentication check in the AJAX Dashboard module for Drupal allows unauthenticated users to access sensitive dashboard functionality. The vulnerability affects all versions before 3.1.0. Site administrators should update immediately to version 3.1.0 or later to prevent unauthorized access to dashboard data and operations.
What an attacker can do
Access dashboard functionality and data without logging in.
Potential impact on your site
Unauthorized users can view and potentially modify dashboard data and settings.
Conditions required to exploit
Network access to the Drupal site; no authentication required.
Key dates
External resources
Related vulnerabilities
