The vulnerability CVE-2025-24778 in De paragon No Spam At All arises from missing authorization checks caused by incorrectly configured access control security levels. This allows users with some privileges to potentially execute unauthorized operations that could alter data or disrupt service availability. The affected versions include all releases up to and including 1.3. The CVSS 3.1 base score is 5.4, indicating a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and impacts on integrity and availability but not confidentiality. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with limited privileges may exploit this vulnerability to perform unauthorized actions that could compromise data integrity or cause denial of service conditions. Confidentiality is not impacted. The vulnerability could affect the reliability and correctness of the affected system's operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations to ensure proper authorization enforcement. Monitor for any updates from the vendor regarding patches or workarounds.