The vulnerability resides in the unknown code of the Backend component of Bdtask Garage 24 Garage Management Software 1.0 and is an improper authorization flaw. Manipulation of the component can allow an attacker to bypass normal authorization checks, potentially gaining unauthorized access to protected resources. The CVSS score of 5.3 indicates a moderate severity, reflecting the potential confidentiality impact without full remote code execution.

Bdtask Garage 24 Garage Management Software is affected; the vulnerability applies to version 1.0 of the software. No additional vendor or product variants are listed.

The exploit is considered remote and publicly available, as noted in the CVE description. Criticality is moderate with a CVSS score of 5.3, while the EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog. Without an official fix from the vendor, the risk remains that a remote attacker could manipulate the Backend to achieve unauthorized access if the software remains unpatched or improperly configured.