This vulnerability in marcoingraiti Actionwear products sync (<= 2.3.3) is due to missing authorization checks in the products sync functionality. This incorrect access control configuration allows an attacker with low privileges to potentially cause a denial of service or availability disruption. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, and impact limited to availability loss. No patch or official remediation guidance is currently provided.

The impact is limited to availability disruption of the Actionwear products sync service. There is no impact on confidentiality or integrity. The vulnerability requires the attacker to have low privileges and can be exploited remotely over the network. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected Actionwear products sync functionality to trusted users only and monitor for unusual activity related to product synchronization processes.