CVE-2023-24896: Dynamics 365 Finance Spoofing Vulnerability

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?

Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.