This vulnerability in mjperpinosa stumasy up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be allows remote attackers to bypass authorization by manipulating the assignment_item_id argument in an unknown function within the /PHP/objects/notes component (Note Handler/Assignment Handler). The vulnerability is confirmed public with a CVSS 4.0 base score of 6.9 (medium severity). Due to the product's continuous delivery model, no discrete versioning information is available for affected or patched releases. The vendor has not issued any advisory or remediation guidance as of the publication date.

Successful exploitation allows an unauthenticated remote attacker to bypass authorization controls, potentially granting unauthorized access or actions related to assignment items handled by the Note Handler/Assignment Handler component. The exact scope and impact of the unauthorized access are not detailed. The vulnerability has a medium severity rating (CVSS 6.9).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, monitor official channels for updates. In the meantime, consider restricting access to the affected component or implementing additional access controls if feasible.