CyberRota Analysis
AI-GeneratedThe vulnerability allows unauthorized access to documents in the extension's frontend detail-view lookup, bypassing the site's access controls due to the absence of siteHash filtering. This could enable an attacker to exploit the system by retrieving sensitive documents if they can guess or obtain a valid Solr document ID. Organizations using this extension should prioritize remediation to prevent potential data exposure.
Original NVD Description
The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access restrictions enforced elsewhere.