This vulnerability in Prodigy Commerce arises from missing authorization checks caused by misconfigured access control security levels. Affected versions include all versions up to and including 3.1.2. The issue allows an attacker with low privileges and no user interaction to perform unauthorized actions that can alter data integrity. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and unchanged scope. No official patch or vendor advisory is currently available.

The vulnerability impacts the integrity of the Prodigy Commerce application by allowing unauthorized modification of data or actions due to missing authorization controls. Confidentiality and availability are not affected according to the CVSS vector. There are no reports of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and strengthen access control configurations in Prodigy Commerce to ensure proper authorization checks are enforced. Monitor for vendor updates regarding patches or official fixes.