NotFound Apptivo Business Site CRM Missing Authorization Vulnerability Allowing Arbitrary Content Deletion

A missing authorization vulnerability has been identified in NotFound Apptivo Business Site CRM versions through 5.3. This vulnerability allows exploitation of improperly configured access control security levels, potentially leading to unauthorized deletion of content such as images, posts, or pages from affected websites.

Impact

Exploitation of this vulnerability could result in unauthorized deletion of content from the website, including images, posts, or pages.

Remediation

Users of NotFound Apptivo Business Site CRM are advised to update to version 5.3 or later. For those unable to update immediately, Patchstack has issued a virtual patch that blocks attacks targeting this vulnerability.