This vulnerability in YayMail arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The issue affects YayMail versions up to and including 4.3.2. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability. No patch or vendor advisory is currently provided, and no known exploits have been reported.

The vulnerability allows an attacker with low privileges to perform actions that should be restricted, potentially modifying data or configurations improperly (integrity impact). There is no impact on confidentiality or availability. Since no known exploits exist in the wild, the immediate risk is limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to YayMail administration functions to trusted users only and monitor for unusual activity related to access control. Avoid granting unnecessary privileges to users interacting with YayMail.