This vulnerability in PlatiOnline Payments arises from missing authorization checks, leading to incorrectly configured access control security levels. An attacker with low privileges can exploit this to perform unauthorized actions that affect the integrity of the application. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and integrity impact only. The affected versions include all versions up to and including 7.0.0. There is no vendor advisory or patch information available at this time.

The impact is limited to integrity, meaning an attacker could modify or manipulate data or operations without proper authorization. There is no impact on confidentiality or availability. The vulnerability requires low privileges and can be exploited remotely over the network without user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and strengthen access control configurations in PlatiOnline Payments to ensure proper authorization enforcement. Monitor for any updates from the vendor regarding patches or official mitigations.