Threats tagged 'ghsa-v64q-w7f2-vcg7'

A broken access control vulnerability exists in Booking and Rental Manager versions up to and including 2.8.2. This flaw allows subscribers with limited privileges to access resources or functions beyond their authorization. The vulnerability has a medium severity with a CVSS score of 6.5, indicating a network attack vector with low complexity and no user interaction required. Confidentiality impact is high, but integrity and availability are not affected.