Missing Authorization Vulnerability in Fantastic Content Protector Free Allows Exploiting Incorrectly Configured Access Control Security Levels

CVE-2023-25048

What is CVE-2023-25048?

A missing authorization vulnerability in Fantastic Plugins' Fantastic Content Protector Free enables unauthorized access to sensitive content due to improperly configured access control security levels. This issue impacts versions from n/a up to 2.6, potentially allowing attackers to exploit the vulnerability and gain access to restricted areas that should only be accessible to authorized users. These improper configurations can lead to data exposure and other security risks, making it essential for users to assess their configurations and implement necessary updates.

References