CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Publisher Desk ads.txt: from n/a through <= 1.5.0.
Explanation of Vulnerability in Simple Terms
The Publisher Desk ads.txt plugin through version 1.5.0 lacks proper authorization checks, allowing unauthenticated attackers to modify ads.txt configuration. An attacker can alter ad network settings without needing to log in or interact with a site administrator. This affects the integrity of ad serving and may allow injection of unauthorized ad networks or removal of legitimate ones.
What an attacker can do
Modify ads.txt configuration without authentication.
Potential impact on your site
Attackers can inject unauthorized ad networks or alter ad serving rules, potentially redirecting ad revenue or serving malicious ads.
Conditions required to exploit
Network access to the site; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
