This vulnerability in Brainstorm Force Starter Templates (<= 4.7.5) is an authorization bypass issue caused by insecure direct object references (IDOR), identified as CWE-639. It allows an attacker with limited privileges to manipulate a user-controlled key to bypass authorization checks. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability.

The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized modification of data or actions within the affected application. There is no indication of impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Brainstorm Force communications for updates and consider restricting access privileges as a precaution.