This vulnerability in Shambhu Patnaik Export Categories (<= 1.0) is due to missing authorization checks, permitting unauthorized access to functionality that should be restricted by ACLs. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates it is remotely exploitable without privileges or user interaction and impacts confidentiality to a limited extent. No vendor patch or advisory is available, and the product is not a cloud service, so remediation depends on vendor updates or configuration changes. No exploitation in the wild has been observed.

The vulnerability allows unauthorized remote access to certain functionality within the Export Categories product, potentially exposing limited confidential information. There is no impact on data integrity or system availability. The medium CVSS score reflects this limited confidentiality impact without further privilege or user interaction requirements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently available, users should monitor vendor communications for updates. Until a fix is provided, consider restricting network access to the affected product or implementing compensating access controls where possible.