A high-severity authorization and case-sensitivity flaw in the Nuxt framework creates a risk of unauthorized data access and integrity compromise.

This issue combines CWE-178 (Improper Handling of Case Sensitivity) and CWE-863 (Incorrect Authorization). These flaws allow an unauthenticated attacker to bypass authorization checks through case-manipulated requests.

With a CVSS score of 8.2, this vulnerability poses a high risk to applications built on the Nuxt framework. Successful exploitation could result in the disclosure of sensitive information or unauthorized modification of data, potentially leading to a breach of privacy or loss of application control.

Immediate Action: Update the Nuxt framework to version 3.21.10 or 4.5.1 as appropriate for your deployment.

Proactive Monitoring: Monitor server access logs for requests using inconsistent casing that may indicate attempts to bypass route-based security controls.

Compensating Controls: Ensure that server-side routing logic is configured to normalize incoming request paths before authorization checks are performed.

Public Exploit Available: No confirmed public exploit is available in the provided data.

Given the critical role of the Nuxt framework in web applications, immediate patching is required. Organizations should update to the provided fixed versions to ensure that authorization policies are correctly enforced regardless of request case formatting.