Threats tagged 'ghsa-qv29-fw58-hwxq'

A missing authorization vulnerability exists in HivePress Claim Listings (hivepress-claim-listings) up to version 1.1.4. This flaw allows attackers with limited privileges to exploit incorrectly configured access control, potentially leading to unauthorized actions. The vulnerability has a CVSS score of 4.3, indicating a medium severity impact primarily on integrity without affecting confidentiality or availability.