CVE-2025-30592 describes a missing authorization vulnerability in WesternDeal Advanced Dewplayer (versions up to 1.6). The issue arises from incorrectly configured access control security levels, allowing unauthorized access to certain functionalities or data. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact without integrity or availability impact. No official patch or vendor advisory is provided, and no known exploits have been reported.

The vulnerability allows unauthorized remote attackers to access resources or functionalities that should be protected by access controls, potentially leading to limited confidentiality breaches. There is no impact on integrity or availability. No active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected Advanced Dewplayer installations where possible and monitor for unusual access patterns related to authorization bypass attempts.