This vulnerability in NotFound Bridge Core is due to missing authorization checks, which could allow an attacker with low privileges to perform actions that should require higher authorization. The CVSS score of 4.3 reflects a network attack vector with low complexity and no user interaction required, but limited impact on integrity and no impact on confidentiality or availability. The affected versions include all up to 3.3, but specific version details are not provided. No vendor advisory or patch information is available at this time.

The impact is limited to integrity, with no confidentiality or availability impact. An attacker with low privileges could exploit the missing authorization to perform unauthorized actions, potentially modifying data or system state in a limited way. There are no known exploits in the wild, and the vulnerability requires network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected Bridge Core instances and monitor for unusual activity related to authorization failures. Avoid granting unnecessary privileges to users to reduce risk.