This vulnerability in Contest Gallery allows an attacker to bypass authentication by exploiting an alternate path or channel within the application. This bypass enables unauthorized access without valid credentials, impacting all affected versions through 28.1.2.2. The CVSS 3.1 base score of 9.8 reflects the vulnerability's network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain unauthorized access to the Contest Gallery application, leading to complete compromise of sensitive data and system functionality. The high CVSS score indicates critical impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected application and monitor for suspicious activity related to authentication bypass attempts.