The vulnerability identified as CVE-2024-51666 involves missing authorization controls in the Tosin Oguntuyi Tours application, specifically affecting versions up to 1.0.0. This flaw permits users with limited privileges to execute actions without proper authorization checks, potentially leading to unauthorized information modification. The CVSS 3.1 base score of 4.3 reflects a medium severity, with network attack vector, low attack complexity, and no user interaction required. There is no vendor advisory or patch information available, and the product is not a cloud service.

The impact of this vulnerability is limited to unauthorized modification of information within the affected application. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor for vendor updates and consider implementing additional access control measures or restricting user privileges as a temporary mitigation.