This vulnerability (CVE-2024-13063) in Akinsoft MyRezzta involves an authorization bypass through a user-controlled key, classified under CWE-639. It affects versions starting from s2.02.02 up to but not including v2.05.01. The issue enables forceful browsing, allowing an attacker with limited privileges to potentially access unauthorized resources. The CVSS v3.1 base score is 6.8, reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts including high confidentiality loss, low integrity loss, and low availability loss. No official patch or vendor advisory detailing remediation is currently available.

Successful exploitation could allow an attacker with some privileges and user interaction to bypass authorization controls and access sensitive information, leading to a high confidentiality impact. Integrity and availability impacts are assessed as low. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected versions and monitor for unusual access patterns related to forceful browsing attempts. Avoid exposing the affected application to untrusted networks if possible.