This vulnerability affects the TicketDetailView function in the apps/sspanel/views.py file of the django-sspanel project maintained by Ehco1996. An attacker can remotely manipulate the function to bypass authorization checks, potentially gaining unauthorized access to support ticket details. The issue affects all versions up to and including 2023.12.26. The vendor was contacted but did not respond, and the product is no longer supported, so no official fix or patch has been provided.

Successful exploitation of this vulnerability could allow an attacker with low privileges to bypass authorization controls and access or manipulate support ticket information that should be restricted. This could lead to unauthorized data exposure or modification within the affected application. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no user interaction, and limited confidentiality, integrity, and availability impacts.

No official fix or patch is available as the product is no longer supported and the vendor did not respond to disclosure. Users should consider discontinuing use of the affected versions or migrating to alternative supported solutions. Implementing additional access controls or network-level restrictions around the affected application may help reduce exposure.