CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through <= 1.2.2.
Explanation of Vulnerability in Simple Terms
RPS Include Content versions 1.2.2 and earlier lack proper authorization checks, allowing authenticated users to read sensitive data they should not access. An attacker with a low-privilege account can view confidential information without needing to interact with the site or perform additional steps. The vulnerability does not allow data modification or system unavailability.
What an attacker can do
Read sensitive data belonging to other users or the site without permission.
Potential impact on your site
Any registered user can access confidential information they shouldn't see, including other users' data.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
