CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through <= 2.19.22.
Explanation of Vulnerability in Simple Terms
Spectra versions up to 2.19.22 lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. The vulnerability requires a valid user account but no special interaction. A site admin should update Spectra to a version newer than 2.19.22 to close this access control gap.
What an attacker can do
Read sensitive data belonging to other users or restricted areas of the site.
Potential impact on your site
Authenticated users can view confidential information they lack permission to access.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
