This vulnerability involves missing authorization controls in Cozy Vision's SMS Alert Order Notifications up to version 3.8.8. Due to incorrect access control configuration, unauthorized users can exploit the system to perform actions without proper permissions. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No official patch or fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized users to perform actions that should require authorization, impacting the integrity of the system. There is no confidentiality or availability impact reported. Exploitation could lead to unauthorized manipulation of SMS alert order notifications, potentially causing incorrect or fraudulent notifications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is available, users should monitor Cozy Vision's advisories for updates. Until a fix is released, consider restricting access to the affected system components and reviewing access control configurations to limit exposure.