This vulnerability in Barn2 Plugins Document Library Lite (up to version 1.1.7) involves an authorization bypass caused by improper access control configuration. Specifically, a user can manipulate a key parameter to bypass authorization checks, gaining unauthorized access to data. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, and limited confidentiality impact. No official patch or fix information is available at this time.

The vulnerability allows an attacker to bypass authorization controls and gain unauthorized read access to data within the Document Library Lite plugin. There is no impact on data integrity or availability. Exploitation could lead to exposure of sensitive information depending on the deployment context. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigations or workarounds are currently documented.