The vulnerability identified as CVE-2024-34822 in weDevs weMail is classified as CWE-862 (Missing Authorization). It affects weMail versions up to 1.14.2 and allows unauthorized access to functionality that should require authorization. The CVSS v3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation level has been provided by the vendor as of the publication date.

The impact of this vulnerability is limited to integrity, meaning unauthorized users could potentially perform unauthorized actions that alter data or state within the weMail plugin. There is no impact on confidentiality or availability. Since no known exploits are reported, the immediate risk appears moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. Implementing additional access controls or restricting access to the affected plugin may reduce exposure, but no vendor-provided mitigations are currently documented.