This vulnerability in DevItems Support Genix (support-genix-lite) is due to missing authorization controls, which means that access control mechanisms are improperly configured or absent. As a result, unauthorized users may exploit this flaw to perform unauthorized actions, potentially impacting the integrity of the system. The affected versions include all versions up to 1.4.23. The CVSS v3.1 vector indicates the attack is network-based, requires no privileges or user interaction, and impacts integrity without affecting confidentiality or availability.

The impact is limited to integrity as unauthorized users can perform actions they are not authorized to do. Confidentiality and availability are not affected according to the CVSS vector. There are no known exploits in the wild, which suggests limited active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates and apply any official patches once available. In the meantime, reviewing and tightening access control configurations may help mitigate risk.