This vulnerability in Minoji MJ Update History (up to version 1.0.4) is due to missing authorization (CWE-862). This means that the application does not properly enforce permission checks on certain functions or data, potentially allowing users with limited privileges to access information they should not. The CVSS score of 4.3 reflects that the vulnerability is remotely exploitable with low attack complexity and requires low privileges but does not impact integrity or availability. No vendor patch or official remediation level has been disclosed.

The impact is limited to unauthorized access to certain data or functions within MJ Update History, potentially leading to information disclosure. There is no indication of integrity or availability impact. The vulnerability requires low privileges and no user interaction, but the overall severity is medium due to the limited scope of the confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restricting access to the affected application and reviewing user permissions may help reduce exposure.