CVE-2025-1030 affects SoliClub versions 5.2.4 through before 5.3.7 and involves an exposure of private personal information to unauthorized actors via the query system. This vulnerability falls under CWE-359, which concerns the exposure of sensitive data to unauthorized entities. The CVSS 3.1 score of 7.5 indicates a high-severity issue exploitable remotely without authentication or user interaction, potentially leading to confidentiality breaches. No vendor advisory or patch information is available, and the product is not a cloud service, so remediation responsibility lies with the user organization.

The vulnerability allows attackers to obtain private personal information without authentication, compromising confidentiality. There is no indication of impact on integrity or availability. The high CVSS score reflects the significant risk of data exposure over the network with minimal attack complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor the vendor's communications for updates. In the meantime, consider restricting network access to the affected SoliClub query system and applying compensating controls to limit unauthorized data access.