This vulnerability in Nelio AB Testing arises from missing authorization controls due to misconfigured access control levels. It allows an attacker without privileges to access functionality or data that should be restricted. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates that the attack can be performed remotely over the network without privileges or user interaction, impacting confidentiality but not integrity or availability. The affected versions include all versions up to 8.2.8. No vendor advisory or patch information is currently available.

An attacker can remotely exploit this vulnerability without authentication or user interaction to gain unauthorized access to certain information within the Nelio AB Testing plugin, resulting in limited confidentiality impact. There is no impact on integrity or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the Nelio AB Testing plugin functionality to trusted users only and monitor for unusual access patterns related to this plugin.