This vulnerability, identified as CWE-862 (Missing Authorization), affects motov.net Ebook Store versions up to 6.19. It allows unauthenticated attackers to expose sensitive data due to insufficient authorization checks. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity and no required privileges or user interaction. The vulnerability compromises confidentiality but does not impact integrity or availability. No official patch or remediation guidance is currently provided, and no known exploits are reported in the wild.

An attacker can access sensitive data without authentication, leading to a confidentiality breach. There is no impact on data integrity or system availability. This exposure could result in unauthorized disclosure of private information stored or processed by the Ebook Store application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected Ebook Store versions and monitor for unusual access patterns. Implement additional access controls or compensating controls if possible.