This vulnerability (CVE-2025-1031) in SoliClub by Utarit Informatics Services Inc. is classified as CWE-639, which involves authorization bypass through a user-controlled key. It affects versions from 5.2.4 before 5.3.7. The issue allows an attacker to misuse functionality by bypassing authorization controls, potentially gaining unauthorized access to sensitive information. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. No patch or official fix details are currently available, and the product is not a cloud service.

Successful exploitation can lead to unauthorized disclosure of sensitive information due to bypassing authorization controls. The vulnerability does not affect integrity or availability but poses a high confidentiality risk. There are no known active exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to affected versions where possible and apply compensating controls specific to authorization enforcement if feasible.