This vulnerability in Shk Corporate arises from missing authorization controls, which means that the application does not properly enforce access restrictions for certain operations. Users with limited privileges may exploit this to perform actions beyond their intended permissions, potentially altering data or application state. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, impacting integrity only. The affected versions include all releases up to and including 2.4.1.1. No patch or official fix information is currently available.

The vulnerability allows unauthorized modification of data or application state due to insufficient access control enforcement. There is no impact on confidentiality or availability. Exploitation requires network access and low privileges but no user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in Shk Corporate to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or mitigations.