This vulnerability in Rustaurius Five Star Restaurant Reservations allows an attacker to bypass authorization controls by manipulating a user-controlled key due to misconfigured access control security levels. It affects versions up to and including 2.7.4. The CVSS 3.1 score of 8.6 reflects network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could lead to unauthorized access to protected resources within the Five Star Restaurant Reservations system, compromising confidentiality significantly, with some impact on integrity and availability. This could allow attackers to view or manipulate reservation data without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for unusual activity related to authorization bypass attempts. Avoid exposing the vulnerable versions to untrusted networks if possible.