CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Conferencing with Zoom: from n/a through <= 4.6.6.
Explanation of Vulnerability in Simple Terms
Video Conferencing with Zoom versions up to 4.6.6 lack proper authorization checks, allowing authenticated users to disrupt service availability. An attacker with valid login credentials can trigger a denial-of-service condition without requiring user interaction. The vulnerability affects the application's availability but does not expose sensitive data or allow unauthorized modifications.
What an attacker can do
Disrupt service availability by triggering a denial-of-service condition.
Potential impact on your site
Authenticated users can cause temporary service disruptions affecting video conferencing availability.
Conditions required to exploit
Attacker must have valid login credentials to the application.
Key dates
External resources
Related vulnerabilities
