The vulnerability identified as CVE-2025-23962 affects jjtrabucco Goldstar versions up to 2.1.1 and is characterized by missing authorization checks due to incorrectly configured access control security levels. This weakness could allow an attacker with some privileges (low privileges required) to perform unauthorized actions that affect system integrity. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and no user interaction required. The vulnerability does not impact confidentiality or availability.

The impact is limited to integrity, meaning an attacker could modify or manipulate data or system state without proper authorization. There is no impact on confidentiality or availability. The vulnerability requires the attacker to have low privileges and can be exploited remotely over the network without user interaction.

Patch status is not yet confirmed — no official patch or remediation guidance is currently available from the vendor. Security teams should monitor the vendor advisory for updates and apply any official fixes once released. Until then, review and tighten access control configurations where possible to reduce exposure.