The vulnerability CVE-2025-30864 affects falselight Exchange Rates versions up to 1.2.2 and is characterized by missing authorization checks. This results in incorrectly configured access control, enabling users with some privileges to perform actions beyond their intended scope. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity and no user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits are currently in the wild, and no patch or official remediation guidance is available from the vendor.

The vulnerability allows an attacker with limited privileges to perform unauthorized actions that can alter data or system state (integrity impact). There is no impact on confidentiality or availability. Exploitation requires network access and low complexity, without user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the affected Exchange Rates application to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.