This vulnerability (CVE-2025-23917) involves missing authorization controls in the Chamber Dashboard Business Directory product by Chandrika Guntur, Morgan Kay. It affects versions up to 3.3.8 and is classified under CWE-862 (Missing Authorization). The issue arises from incorrectly configured access control security levels, which could allow users with limited privileges to perform unauthorized actions. The CVSS v3.1 base score is 5.4, indicating a medium severity impact primarily on integrity and availability. No vendor-provided patch or official remediation level is currently documented, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability can lead to unauthorized actions due to missing authorization checks, impacting the integrity and availability of the affected system. Confidentiality is not impacted. The medium CVSS score reflects that an attacker with limited privileges could exploit this issue without user interaction. There are no known active exploits in the wild, which reduces immediate risk but does not eliminate potential future exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to trusted users and reviewing access control configurations may help reduce risk.