This vulnerability in bizswoop BizPrint (print-google-cloud-print-gcp-woocommerce) arises from missing authorization checks, leading to incorrect access control configurations. It affects versions up to 4.6.7 and allows an attacker with low privileges to access functionality without proper authorization. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact. The product is cloud-hosted, and the vendor manages remediation for the service. A patch is available, though no direct patch links are provided.

Successful exploitation could lead to unauthorized access to sensitive information due to missing authorization controls, impacting confidentiality. There is no impact on integrity or availability. The medium severity reflects the potential confidentiality breach with limited privileges required and no user interaction needed. No known active exploitation has been reported.

A patch is available for this vulnerability. Since BizPrint is a cloud service, the vendor typically manages remediation server-side. Users should verify with the vendor advisory that their service instance is updated to the patched version. No additional mitigation steps are indicated at this time.