CyberRota Analysis
AI-GeneratedVuFind versions 11.0.3 and 4.1 are susceptible to incorrect access control, allowing unauthorized execution of functions despite access denial messages. This vulnerability can lead to unauthorized data exposure or manipulation, posing a significant risk to sensitive information. Organizations using these versions should prioritize remediation to safeguard against potential exploitation.
Original NVD Description
Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The application fails to stop processing an incoming request in VuFind\Controller\AbstractBase::validateAccessPermission after it has found that controller level access permissions do not allow access to the requested function. The requester receives a response indicating that access was denied, but the actual function is executed regardless of that.