This vulnerability in Mikado-Themes Justicia involves an authorization bypass through a user-controlled key due to misconfigured access control security levels. It affects versions up to 1.2 and allows an attacker with high privileges to bypass intended authorization mechanisms, potentially leading to limited confidentiality and integrity impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and low impact on confidentiality and integrity, with no impact on availability.

The vulnerability allows an attacker with high privileges to bypass authorization controls, potentially leading to unauthorized access or modification of data within the affected application. The impact is limited to low confidentiality and integrity loss, with no availability impact. There are no reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor vendor communications for updates. Until a fix is available, restrict access to high-privilege accounts and review access control configurations to minimize risk.