This vulnerability, identified as CWE-862 (Missing Authorization), affects JetBooking versions up to 4.1.2. It allows unauthenticated attackers to bypass access controls, leading to unauthorized modification or actions within the application. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

The vulnerability permits unauthenticated attackers to bypass authorization controls, potentially allowing them to perform unauthorized actions that affect the integrity of the JetBooking system. There is no impact on confidentiality or availability according to the CVSS vector. This could lead to unauthorized changes or manipulations within the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds have been provided by the vendor at this time.