This vulnerability in Israpil Textmetrics (up to version 3.6.1) involves missing authorization controls, which means that the application does not properly enforce access restrictions. This can allow users with limited privileges to perform actions beyond their authorization level. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact includes integrity and availability loss but no confidentiality impact.

The vulnerability can lead to unauthorized modification or disruption of the application, affecting its integrity and availability. Confidential data disclosure is not indicated. No known exploits have been reported, so the real-world impact is currently limited to theoretical risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently available, organizations should monitor vendor communications for updates. Until a fix is released, restrict access to the affected application to trusted users only and review access control configurations to minimize risk.