The vulnerability CVE-2025-22592 affects the 8blocks 1003 Mortgage Application versions up to 1.87. It is a Missing Authorization issue where certain functionality is accessible without proper ACL enforcement. This allows an attacker to access sensitive functionality remotely without authentication or user interaction, potentially leading to high confidentiality impact. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope. No official patch or vendor advisory is currently provided.

An attacker can remotely access functionality in the 1003 Mortgage Application that should be restricted by access controls, potentially exposing sensitive information. The impact is rated high due to the confidentiality impact without requiring authentication or user interaction. There is no indication of integrity or availability impact. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application and monitor for unauthorized access attempts. Avoid exposing the application to untrusted networks. Follow up with the vendor for updates on patches or official mitigations.