This vulnerability in Cozy Vision SMS Alert Order Notifications arises from missing authorization checks, which means that access control is improperly configured. This flaw allows an attacker with low privileges to perform actions that should be restricted, potentially impacting the integrity and availability of the system. The affected versions include all versions up to 3.9.0. The CVSS score is 5.4 (medium severity), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on integrity and availability but not confidentiality. There is no indication of a patch or vendor advisory at this time.

The vulnerability allows unauthorized actions due to missing authorization controls, which can lead to integrity and availability impacts on the SMS Alert Order Notifications system. Confidentiality is not affected. There are no known active exploits in the wild. The medium severity score reflects moderate risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SMS Alert Order Notifications system to trusted users only and monitor for unusual activity related to order notifications. Avoid exposing the affected system to untrusted networks.