Akanzstev Yandex Dostavka Boxberry Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the Yandex Dostavka (Boxberry) plugin, specifically in versions through 2.32. This vulnerability allows for the exploitation of improperly configured access control, leading to broken access management.

Impact

Exploitation of this vulnerability could result in unauthorized access to restricted areas or functions of the application, allowing users to perform actions or view data they should not have access to.