This vulnerability in Premmerce User Roles arises from missing authorization checks, which means that users with limited privileges might access or perform actions beyond their intended permissions. The issue affects all versions up to and including 1.0.13. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to confidentiality loss without integrity or availability impact.

The vulnerability could allow an attacker with low privileges to gain unauthorized access to certain data or functionality, resulting in limited confidentiality impact. There is no indication of integrity or availability compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user roles and permissions carefully to minimize exposure. Monitor vendor channels for updates and apply patches promptly once available.