CVE-2025-52766

Vulnerability

Printeers Print & Ship versions up to and including 1.17.0 suffer from a missing authorization vulnerability. This flaw allows unprivileged users to execute actions that should be restricted to higher-privileged users due to incorrectly configured access control security levels [1].

Exploitation

An attacker can exploit this vulnerability by leveraging their unprivileged user status to trigger a function that lacks proper authorization checks. This typically involves an attacker interacting with the application in a way that bypasses intended access controls, potentially through a web interface [1].

Impact

Successful exploitation of this vulnerability allows an unprivileged user to perform higher-privileged actions. This could lead to unauthorized modifications, data manipulation, or other security compromises depending on the specific function affected by the broken access control [1].

Mitigation

Users should update Printeers Print & Ship to a version later than 1.17.0. If an immediate update is not possible, users are advised to seek assistance from their hosting provider or web developer. The specific fixed version and release date are not detailed in the available references [1].