Access Control Vulnerability in HappyFiles Pro by HappyFiles

CVE-2023-25446

What is CVE-2023-25446?

A Missing Authorization vulnerability in HappyFiles Pro allows unauthorized access due to incorrectly configured access control security levels. This flaw can be exploited to elevate privileges and gain access to sensitive operations, impacting the security and integrity of the affected installations. Users of versions up to 1.8.1 are at risk. It is crucial for administrators to review their access controls and apply necessary updates to mitigate potential exploits.

References