CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eShipper Commerce: from n/a through <= 2.16.12.
Explanation of Vulnerability in Simple Terms
eShipper Commerce versions 2.16.12 and earlier lack proper authorization checks, allowing unauthenticated attackers to disrupt service availability. The vulnerability requires only network access and no user interaction. While the impact is limited to availability, the ease of exploitation and lack of authentication requirements make this a moderate concern for site operators.
What an attacker can do
Disrupt the availability of the eShipper Commerce service without authentication.
Potential impact on your site
Your eShipper Commerce site may become unavailable or experience service disruptions from unauthenticated attacks.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
