This vulnerability (CVE-2024-38737) in ReDi Restaurant Reservation is classified as CWE-862 (Missing Authorization). It allows an attacker with low privileges to access functionality that should be restricted by ACLs but is not properly constrained. The issue affects versions up to 24.0422. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity with no availability impact. No patch or official remediation guidance is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability could allow an attacker with low privileges to access restricted functionality within the ReDi Restaurant Reservation system, potentially leading to unauthorized disclosure or modification of data. There is no indication of availability impact or known exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently provided, users should monitor vendor communications for updates. In the meantime, restrict access to the affected system to trusted users only and review internal access controls to limit exposure.