This vulnerability in Made Neat Acknowledgify (<= 1.1.3) involves missing authorization controls, which could allow users with limited privileges to perform unauthorized actions. The CVSS score of 4.3 reflects a medium severity with network attack vector, low attack complexity, and no user interaction required. Confidentiality is not impacted, but integrity is partially impacted, and availability is unaffected. No official patch or vendor advisory is currently available, and no exploits are known in the wild.

The vulnerability could allow an attacker with some level of privileges to bypass authorization checks and perform actions they should not be permitted to do, potentially leading to limited integrity impacts. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor for vendor updates and apply any forthcoming patches promptly. Until a fix is available, restrict access to trusted users and review authorization configurations where possible.