CVE-2024-24716 is classified as a CWE-862 Missing Authorization vulnerability in the Awesome Support plugin, affecting versions through 6.1.6. The vulnerability allows an attacker with limited privileges to bypass authorization controls, potentially leading to limited integrity and availability impacts. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation has been disclosed by the vendor as of the publication date.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions that may affect the integrity and availability of the affected system. There is no impact on confidentiality. No known exploits are reported in the wild, reducing immediate risk, but the medium severity indicates a moderate threat if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual activity related to privilege misuse. Avoid granting unnecessary privileges to users within the Awesome Support plugin.