This vulnerability in oggix Ongkoskirim.id (<= 1.0.6) arises from missing authorization controls, leading to incorrect access control enforcement. It allows users with limited privileges to perform unauthorized actions, impacting the integrity and availability of the system. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and unchanged scope with no confidentiality impact but limited integrity and availability impact. No patch or vendor advisory is provided, and the product is not a cloud service.

The vulnerability allows unauthorized modification or disruption of the system due to missing authorization checks, affecting integrity and availability. Confidentiality is not impacted. There are no known exploits in the wild. The medium CVSS score reflects moderate risk requiring attention but not immediate critical response.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users with appropriate privileges and monitor for unusual activity related to access control. Avoid exposing vulnerable versions to untrusted networks.