The vulnerability CVE-2025-31868 affects JoomSky JS Job Manager versions up to 2.0.2 and is characterized by missing authorization checks. This results in incorrectly configured access control security levels, allowing unauthorized users to perform actions that should require proper authorization. The CVSS score of 5.3 reflects a network attack vector with low complexity and no privileges or user interaction required, impacting integrity but not confidentiality or availability. No patch or official fix information is available at this time.

The vulnerability allows unauthorized modification of data within the JS Job Manager due to missing authorization controls. There is no impact on confidentiality or availability reported. The medium severity rating corresponds to the potential integrity impact without elevated privileges or user interaction needed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in JS Job Manager where possible to limit exposure. Monitor for updates from JoomSky regarding patches or official mitigations.