This vulnerability in Scott Taylor Avatar (versions up to 0.1.4) involves an authorization bypass caused by improperly configured access control mechanisms that rely on a user-controlled key. An attacker with low privileges and no user interaction can exploit this flaw remotely to perform unauthorized actions that affect data integrity. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

The impact is limited to integrity, meaning an attacker could potentially modify data or perform unauthorized actions within the system. There is no impact on confidentiality or availability. The medium severity rating reflects the limited scope and impact of the vulnerability. No known exploits have been reported, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is available, users should monitor vendor communications for updates. Until a fix is released, restricting access to the affected versions and minimizing exposure may reduce risk.