This vulnerability (CVE-2024-32949) in Prince Integrate Google Drive is classified as CWE-862 (Missing Authorization). It arises from improperly configured access control, enabling unauthorized users to access or manipulate resources without proper permissions. The issue affects versions up to and including 1.3.8. The CVSS 3.1 base score is 8.3, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor remediation or patch is currently documented.

Exploitation of this vulnerability can lead to unauthorized access and potential manipulation of data within the Integrate Google Drive product. The impacts include partial loss of confidentiality, integrity, and availability of the affected system. Because the vulnerability allows access without proper authorization, sensitive information could be exposed or altered by attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected product and applying compensating controls to limit exposure.