This vulnerability in themeton Rozario involves missing authorization controls, classified under CWE-862. It allows attackers to bypass access control mechanisms due to incorrect configuration, which can lead to unauthorized modification or actions within the application. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact limited to integrity loss without confidentiality or availability impact. The affected versions include Rozario up to 1.4. No patch or official fix information is currently available.

The vulnerability can lead to unauthorized integrity modifications within the affected application due to missing authorization checks. Confidentiality and availability are not impacted according to the CVSS vector. There are no known active exploits targeting this vulnerability at present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and strengthen access control configurations in Rozario to ensure proper authorization enforcement. Monitor vendor communications for updates on patches or official mitigations.