Missing authorization allows forceful browsing within the module used to share view displays via iframes. The module fails to sufficiently block access to view displays, which may allow the execution of resource-intensive views and negatively impact site performance. Exploitation requires the attacker to know the specific view and display IDs.