CVSS base score
What the vulnerability does
Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star Restaurant Reservations: from n/a through 2.7.14.
Explanation of Vulnerability in Simple Terms
Five Star Restaurant Reservations versions 2.7.14 and earlier contain a missing authorization flaw that allows attackers to perform unauthorized actions. The vulnerability stems from insufficient access control checks on sensitive operations. Affected site administrators should update to a version newer than 2.7.14 as soon as a patch becomes available.
What an attacker can do
Perform actions they are not authorized to perform within the reservation system.
Potential impact on your site
Unauthorized users may modify reservations, access booking data, or perform administrative actions without proper credentials.
Conditions required to exploit
Network access to the affected Five Star Restaurant Reservations installation.
Key dates
External resources
Related vulnerabilities
