CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.6.5.
Explanation of Vulnerability in Simple Terms
The Pinpoint Booking System contains a missing authorization flaw that allows unauthenticated attackers to modify data over the network. An attacker can send requests without credentials to alter booking information or other system records. This vulnerability affects all versions up to 2.9.9.6.5 and requires no user interaction to exploit.
What an attacker can do
Modify booking records or other data without logging in.
Potential impact on your site
Attackers can alter bookings, customer information, or other records without permission, potentially disrupting operations.
Conditions required to exploit
Network access to the Pinpoint Booking System; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
