This vulnerability involves missing authorization checks in MaxiBlocks versions up to 2.1.3, which could allow an attacker with low privileges to access resources or functions that should be restricted. The issue stems from incorrectly configured access control security levels. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, scope changed, and limited confidentiality impact. No integrity or availability impacts are noted.

An attacker with low privileges could exploit this vulnerability remotely to gain unauthorized access to certain resources or functions within MaxiBlocks, potentially leading to limited confidentiality breaches. There is no impact on integrity or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor the vendor's communications for updates. Until a fix is available, review and tighten access control configurations where possible to reduce exposure.