The enituretechnology Distance Based Shipping Calculator versions up to 2.0.22 suffer from a missing authorization vulnerability. This issue arises from improperly configured access control mechanisms, allowing users with limited privileges to perform actions beyond their authorization. The vulnerability is classified as medium severity with a CVSS 3.1 base score of 5.4, indicating a network attack vector with low attack complexity, requiring privileges, no user interaction, and impacts integrity and availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

Exploitation of this vulnerability could allow an attacker with some level of privileges to perform unauthorized actions within the Distance Based Shipping Calculator, potentially impacting the integrity and availability of the affected system. There is no indication of confidentiality impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations for the Distance Based Shipping Calculator to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.