This vulnerability (CWE-862) in Unbounce Landing Pages involves missing authorization checks, enabling attackers with limited privileges to bypass access controls. The flaw affects versions up to 1.1.4 and can result in integrity compromise and denial of service conditions. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No known exploits are reported in the wild, and no vendor remediation level has been published.

The vulnerability allows attackers with some privileges to bypass access control mechanisms, potentially leading to unauthorized modification of data (integrity loss) and disruption of service (availability loss). Confidentiality is not impacted. The high CVSS score reflects the significant impact on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Unbounce Landing Pages to limit exposure. Monitor for vendor updates regarding patches or official mitigation steps.