This vulnerability in Awesome Support (up to version 6.1.7) is classified as CWE-862, indicating missing authorization controls. An attacker with low privileges can potentially perform actions or access resources that should require higher authorization. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, and limited confidentiality impact. No official fix or vendor advisory has been published yet.

The vulnerability could allow an attacker with low privileges to bypass authorization checks, potentially leading to unauthorized access to certain data or functions within the Awesome Support plugin. The impact is limited to confidentiality loss without affecting integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and restrict user privileges carefully to minimize exposure. Monitor official Awesome Support channels for updates regarding patches or mitigations.