The vulnerability identified as CVE-2024-35723 concerns a missing authorization control in the Andrew Dashboard To-Do List application, versions up to 1.2.0. This issue permits users with limited privileges to perform actions that should require higher authorization, potentially allowing unauthorized changes to the to-do list data. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No patches or vendor advisories are currently available to confirm remediation status.

The vulnerability allows unauthorized modification of data within the Dashboard To-Do List application by users with limited privileges. There is no impact on confidentiality or availability, but integrity can be affected. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected versions and monitor for updates from the vendor. No vendor advisory or patch links are currently available.