This vulnerability in the Drupal Advanced Content Feedback (admin_feedback) module (versions 0.0.0 through 2.8.0) is classified as CWE-863 (Incorrect Authorization). It permits forceful browsing, meaning unauthorized users might access resources or functions they should not be able to. The CVSS score is 3.1 (low), with network attack vector, high attack complexity, low privileges required, no user interaction, and limited impact on integrity only. No official patch or remediation level has been provided in the available data.

The vulnerability allows unauthorized users to perform forceful browsing, potentially accessing or manipulating content feedback features without proper authorization. There is no impact on confidentiality or availability, and the integrity impact is limited. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Drupal security advisories for updates. Until a fix is available, restrict access to the affected module and apply strict access controls where possible.