Description

Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Shop: from n/a through <= 1.7.1.

Severity (CVSS)

Base score7.1
SeverityHigh
VersionCVSS 3.1
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Provided byCNA

Weaknesses

  • CWE-862 — Missing Authorization

Affected products

VendorProductVersions
themehunkOpen Shop0 to <=1.7.1

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 14 Jul 2026 07:01 UTC.