This vulnerability (CWE-862) in SoftLab Integrate Google Drive involves missing authorization controls, which means the product does not properly verify whether a user has the right to perform certain actions or access specific resources. It affects all versions up to 1.3.9. The CVSS 3.1 base score of 5.3 reflects that the vulnerability can be exploited remotely without privileges or user interaction, resulting in limited confidentiality impact but no integrity or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

An attacker can remotely exploit this vulnerability without authentication or user interaction to gain unauthorized access to data or functionality within the affected product. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected product and monitor for unusual access patterns related to Google Drive integration features. Avoid exposing the vulnerable service to untrusted networks if possible.