This vulnerability in raratheme Benevolent (<= 1.3.9) is due to missing authorization checks, which results in incorrect access control enforcement. An attacker can exploit this to perform unauthorized actions that affect data integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low integrity impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows unauthorized modification or manipulation of data (integrity impact) without affecting confidentiality or availability. Since no known exploits are reported, the practical impact is currently limited but could increase if exploited. The medium severity score reflects moderate risk due to ease of exploitation and potential integrity compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in the affected versions of Benevolent to mitigate unauthorized access risks.