This vulnerability in WebGeniusLab BigHearts involves missing authorization controls due to misconfigured access control security levels. It affects versions up to 3.1.14 and allows unauthorized users to perform certain actions without proper privileges. The CVSS score of 5.3 indicates a medium severity impact, primarily affecting integrity without impacting confidentiality or availability. No patch or official remediation guidance is currently provided, and the product is not a cloud service, so remediation depends on vendor updates or user-applied fixes.

The vulnerability allows unauthorized users to perform actions that should require authorization, potentially leading to integrity issues within the affected system. There is no impact on confidentiality or availability reported. No known exploits exist in the wild, so the immediate risk may be limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WebGeniusLab communications for updates. Until a fix is available, restricting access to the affected application and reviewing access control configurations may help reduce risk.