The vulnerability identified as CVE-2024-54239 affects the dugudlabs Eyewear prescription form up to version 4.0.18. It is a Missing Authorization issue that permits privilege escalation by bypassing necessary authorization controls in the eyewear-prescription-form. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting that the vulnerability is remotely exploitable without authentication, with low attack complexity, and results in high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to escalate privileges within the affected application, potentially leading to full compromise of the eyewear prescription form system. This could result in unauthorized access to sensitive data, modification of data, and disruption of service. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications closely for updates. Until a fix is available, consider restricting access to the affected component and applying compensating controls to limit exposure.