CVE-2026-84217: Missing Authorization in Mamunur Rashid Classified Listing

This vulnerability in Mamunur Rashid Classified Listing is due to missing authorization controls, classified under CWE-862. It allows users with limited privileges to access functionality that should be restricted by Access Control Lists (ACLs). The affected versions are from the initial release through 6.1.3, with the vulnerability fixed in version 6.1.5 or later. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

An attacker with low privileges can access functionality that should be restricted, potentially leading to unauthorized integrity and availability impacts. There is no confidentiality impact reported. The overall impact is limited but could allow unauthorized modification or disruption of certain features within the application.

No official patch or remediation link is provided in the data. However, the affected versions are up to but not including 6.1.5, implying that upgrading to version 6.1.5 or later mitigates the vulnerability. Users should update to version 6.1.5 or newer to resolve this issue. Until then, restrict access to the application to trusted users only.