This vulnerability in OLIVESYSTEM's 診断ジェネレータ作成プラグイン (up to version 1.4.16) is due to missing authorization checks, permitting unauthorized users to access certain functions that should be restricted by ACLs. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low impact on integrity. There is no evidence of known exploits in the wild and no vendor patch or advisory information is provided.

The vulnerability allows unauthorized access to certain plugin functionalities that should be protected by ACLs, potentially leading to unauthorized modification or manipulation of data or operations within the affected plugin. There is no impact on confidentiality or availability. The overall impact is limited to integrity with a low severity level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and monitor usage closely to prevent unauthorized access. Avoid exposing the plugin to untrusted networks or users.