This vulnerability in ABCdatos Protección de datos – RGPD (up to version 0.68) is due to missing authorization checks, resulting in incorrectly configured access control security levels. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. The issue allows unauthorized actors to modify data without proper authorization but does not affect confidentiality or availability. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows unauthorized modification of data within the affected product, potentially compromising data integrity. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, indicating limited observed exploitation to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system to trusted users only and monitor for unusual modification activities related to the product.