This vulnerability in solutioned Staff Training (<=1.0.7) is due to missing authorization controls, allowing unauthenticated users to bypass access restrictions. The CVSS 3.1 score of 7.3 reflects network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.

An attacker can exploit this vulnerability remotely without authentication to gain unauthorized access to sensitive data or functionality within the Staff Training product, potentially leading to information disclosure, data modification, or service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected Staff Training instances and monitor for suspicious activity related to unauthorized access attempts.