This vulnerability in Cache Sniper for Nginx arises from missing authorization checks, permitting unauthorized users with some privileges to exploit incorrectly configured access control settings. Affected versions include all releases up to and including 1.0.4.2. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring privileges, no user interaction, and resulting in integrity impact only. There is no vendor advisory or patch information available at this time.

The vulnerability allows an attacker with some level of privileges to perform unauthorized actions due to missing authorization enforcement, potentially leading to integrity violations within the Cache Sniper for Nginx component. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for Cache Sniper for Nginx to ensure proper authorization enforcement. Limit privileges of users interacting with this component to reduce risk.