The vulnerability identified as CVE-2024-32704 affects reputeinfosystems ARForms versions up to 6.4 and involves missing authorization controls. This allows an attacker with low privileges to execute unauthorized operations, potentially impacting the integrity and availability of the system. The CVSS 3.1 base score is 7.1, with network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No patch or official remediation information is currently available.

An attacker with low privileges can exploit the missing authorization to perform unauthorized actions that may degrade system integrity and cause high availability impact. There is no reported confidentiality impact. The vulnerability could disrupt normal operations or cause denial of service conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to ARForms to trusted users only and monitor for suspicious activity related to authorization bypass attempts.