This vulnerability in Nelio Content arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The issue affects versions up to 4.0.5 and allows an attacker with low privileges to access or perform actions that should be restricted. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction needed, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to gain unauthorized access to sensitive information, leading to a high confidentiality impact. There is no impact on data integrity or system availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Nelio Software's advisories for updates. Until a fix is available, restrict access to Nelio Content to trusted users only and review access control configurations to minimize exposure.