CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Vouchers: from n/a through <= 4.6.9.
Explanation of Vulnerability in Simple Terms
The Gift Vouchers product by Codemenschen versions 4.6.9 and earlier lack proper authorization checks. An unauthenticated attacker can modify voucher data or disable voucher functionality by sending crafted network requests. No user interaction is required. Sites using affected versions should update immediately.
What an attacker can do
Modify or disable gift vouchers without authentication.
Potential impact on your site
Attackers can tamper with or disable your gift voucher system, affecting sales and customer trust.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
