This vulnerability in eshipper eShipper Commerce (<= 2.16.12) is due to missing authorization checks, which results in incorrect access control enforcement. The issue allows an attacker to bypass intended access restrictions, potentially leading to denial of service or other availability impacts. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and low availability impact. No patch or official remediation level has been published as of now.

The vulnerability can be exploited remotely without authentication or user interaction, potentially causing availability disruption in affected eShipper Commerce deployments. There is no impact on confidentiality or integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or mitigations.