The vulnerability CVE-2025-24679 affects the webraketen Internal Links Manager product through version 2.5.2. It is a missing authorization issue where access control security levels are incorrectly configured, allowing users with limited privileges to perform actions or access resources without proper authorization. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and limited confidentiality impact. No official patch or remediation guidance is provided in the available data.

The impact is limited to unauthorized access due to missing authorization checks, potentially exposing some confidential information. There is no impact on data integrity or system availability. The vulnerability requires an attacker to have some level of privileges already, and it can be exploited remotely over the network without user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Internal Links Manager to ensure proper authorization enforcement. Monitor for vendor updates and apply patches promptly once available.