Missing Authorization Vulnerability in Brainstorm Force Spectra Allows Exploiting Incorrectly Configured Access Control Security Levels

CVE-2023-23825

What is CVE-2023-23825?

The vulnerability in the Brainstorm Force Spectra plugin is characterized by missing authorization checks that could lead to exploitation through incorrectly configured access control security levels. This issue compromises the integrity of user permissions and may allow unauthorized actions within the application, creating significant security risks for users of the plugin. Affected versions range from unspecified versions up to 2.3.0, and it is crucial for users to ensure that their installations and configurations are secure.

References