This vulnerability in Equalize Digital Accessibility Checker arises from missing authorization checks, leading to incorrect access control enforcement. Affected versions up to 1.31.0 may allow users with limited privileges to access features or data they should not be authorized to use. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring low privileges, but no user interaction. The impact is limited to partial confidentiality loss without integrity or availability impact. No official patch or remediation guidance has been published yet.

The vulnerability could allow an attacker with some level of privileges to bypass access control restrictions, potentially gaining access to information that should be restricted. However, the impact is limited to confidentiality with no integrity or availability effects. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations in the affected product to minimize exposure. Monitor for vendor updates or patches addressing this issue.