The vulnerability CVE-2024-50476 affects GRÜN spendino Spendenformular versions up to 1.0.1 and is characterized by missing authorization controls. This security gap permits an attacker to escalate privileges, potentially gaining unauthorized access or control over the application. The CVSS 3.1 base score of 9.8 reflects network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory has been provided to confirm remediation status.

Successful exploitation of this vulnerability can lead to full compromise of the affected application, including unauthorized access and control, resulting in severe confidentiality, integrity, and availability impacts. Given the critical CVSS score, the risk to affected systems is very high. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity related to privilege escalation attempts. Avoid deploying or exposing vulnerable versions in production environments.