This vulnerability (CVE-2024-43250) in Bit Apps Bit Form Pro versions up to 2.6.4 involves incorrect authorization due to improper enforcement of ACLs. It allows users with limited privileges to access functionality that should be restricted. The CVSS score of 7.1 reflects a high-severity issue exploitable remotely with low complexity and no user interaction. The vulnerability impacts integrity and availability but not confidentiality. No patch or official remediation has been published yet, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized access to restricted functionality, potentially leading to limited integrity loss and high availability impact. Attackers with low privileges can exploit this remotely without user interaction. There is no confidentiality impact reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is available, users should monitor vendor communications for updates. Until a patch is released, restrict access to the affected Bit Form Pro installations to trusted users only and consider additional access controls at the network or application level to limit exposure.