This vulnerability in Themefic Tourfic arises from missing authorization checks, which means that certain actions or functionalities may be accessible without proper permission validation. The issue affects Tourfic versions up to 2.22.5. The CVSS vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with no confidentiality impact but with integrity and availability impacts. No vendor advisory or patch information is provided, and the remediation level is unknown.

Exploitation of this vulnerability can lead to unauthorized modification of data (integrity impact) and disruption of service (availability impact). There is no confidentiality impact reported. The vulnerability can be exploited remotely without authentication or user interaction, increasing its risk profile. However, no known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor official Themefic communications for updates. Implementing additional access control measures at the environment level may help mitigate risk temporarily.