This vulnerability in wproyal Ashe is caused by missing authorization controls, specifically due to incorrectly configured access control security levels. It affects versions up to and including 2.266. The CVSS score is 4.3 (medium severity), with an attack vector over the network, low attack complexity, requiring low privileges, no user interaction, and impacts integrity without affecting confidentiality or availability. No official patch or remediation level has been provided by the vendor, and no known exploits have been observed.

An attacker with low privileges could exploit this vulnerability to perform unauthorized actions that impact the integrity of the system. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Avoid granting unnecessary privileges to users as a precaution until a fix is available.