This vulnerability involves missing authorization in the Mobile Contact Line product by yydevelopment, allowing an attacker with low privileges to exploit improperly configured access control mechanisms. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. The affected versions include all up to 2.4.0. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows an attacker with low privileges to perform actions that violate intended access control policies, potentially leading to unauthorized modification of data (integrity impact). There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit exposure. Monitor for vendor updates regarding patches or official mitigations.