This vulnerability in Cozy Vision SMS Alert Order Notifications arises from missing authorization checks, which results in incorrect access control configurations. This flaw allows an attacker with low privileges to perform unauthorized actions that can affect the integrity and availability of the system. The affected versions include all releases up to and including 3.9.0. The CVSS v3.1 base score is 5.4, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impact limited to integrity and availability.

The vulnerability can be exploited remotely by an attacker with low privileges to perform unauthorized modifications or disruptions in the SMS Alert Order Notifications system. There is no impact on confidentiality. The integrity and availability of the affected system components may be compromised, potentially affecting the reliability of SMS alert order notifications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, review and strengthen access control configurations where possible to limit exposure. Monitor vendor communications for updates on remediation.