Threats tagged 'ghsa-5xpw-q2mg-q7qg'

A missing authorization vulnerability exists in BAKKBONE Australia FloristPress bakkbone-florist-companion, affecting versions up to 7.8.5. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity, with impact limited to integrity loss without confidentiality or availability impact.