This vulnerability, identified as CWE-862 (Missing Authorization), exists in Magepeople inc.'s Bus Ticket Booking with Seat Reservation product. It allows attackers to bypass access control mechanisms due to improper authorization checks. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact. No patch or official remediation guidance is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized users to perform actions that should require authorization, potentially modifying data or system state improperly. There is no impact on confidentiality or availability. The integrity impact is low to medium, consistent with the CVSS score of 5.3. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, users should monitor Magepeople inc. communications for updates. Until a patch is available, restricting access to the affected system and reviewing access control configurations may help reduce risk.