The raratheme App Landing Page application up to version 1.2.2 suffers from a missing authorization vulnerability. This flaw arises from incorrectly configured access control security levels, which may allow unauthorized modification or manipulation of certain application components or data. The vulnerability does not affect confidentiality or availability but impacts integrity. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that affect the integrity of the application or its data. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, indicating limited current active threat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor for updates from raratheme. Until a fix is available, review and tighten access control configurations where possible to reduce exposure.