A critical authorization bypass vulnerability in Utarit Informatics SoliClub exposes the application to unauthorized functionality access by unauthenticated remote attackers.

This flaw is identified as an Authorization Bypass Through User-Controlled Key (CWE-639). It allows an unauthenticated attacker to manipulate parameters to gain unauthorized access to system functions that should otherwise be restricted.

The ability for an unauthenticated user to bypass authorization controls represents a significant security risk. Successful exploitation could lead to unauthorized access to sensitive application features or data, potentially resulting in data exposure or operational disruption. With a CVSS score of 7.5, this high-severity vulnerability requires immediate attention to protect the integrity of the affected software.

Immediate Action: Administrators should update SoliClub to version 5.3.7 or the latest available version provided by Utarit Informatics.

Proactive Monitoring: Security teams should review application access logs for unusual patterns or attempts to access administrative functions from unauthorized sources.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block malicious traffic patterns attempting to manipulate user-controlled keys or bypass standard authentication flows.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the potential for unauthenticated access to system functionality, organizations utilizing SoliClub must prioritize upgrading to version 5.3.7. Failure to patch creates a clear vector for unauthorized system interaction, and immediate remediation is strongly advised to eliminate this exposure.