CVE-2024-34821 describes a missing authorization vulnerability in the Anssi Laitila Contact List product versions up to 2.9.87. This flaw allows unauthorized access to functionality that should require authorization, potentially leading to unauthorized modifications (integrity impact). The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope. No patch or official fix information is provided, and no exploits are known to be active.

The vulnerability allows unauthorized users to perform actions that should be restricted, impacting the integrity of the Contact List data. There is no impact on confidentiality or availability reported. The medium severity score reflects the potential for unauthorized modification without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is available, users should monitor for updates from the vendor. In the meantime, restricting network access to the affected Contact List instances or implementing additional access controls may reduce exposure.