This vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition (versions up to 5.2.19) arises from missing authorization controls, allowing attackers to bypass access restrictions. The issue stems from incorrectly configured access control security levels, which could enable unauthorized modification or disruption of service. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts limited to integrity and availability.

Successful exploitation could allow an unauthenticated attacker to perform unauthorized actions affecting the integrity and availability of the affected system. Confidentiality is not impacted. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations to ensure proper authorization enforcement. Monitor vendor communications for updates regarding patches or official mitigations.