This vulnerability in ameliabooking Amelia involves missing authorization checks due to incorrectly configured access control. It affects versions up to 1.2.38 and allows an attacker to bypass intended access restrictions. The CVSS 3.1 score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality but not integrity or availability. No patch or vendor advisory is currently available to confirm remediation status.

An attacker can exploit this vulnerability remotely without authentication or user interaction to gain unauthorized access to certain data or functionality within the affected Amelia plugin. The impact is limited to confidentiality loss, with no direct impact on integrity or availability reported. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting network access to the affected plugin or implementing compensating access controls if feasible.