The vulnerability identified as CVE-2025-47486 affects CyberChimps Responsive Plus versions up to 3.1.9. It is caused by missing authorization checks, which permit unauthorized users to access functionality that is not properly constrained by ACLs. This can lead to unauthorized actions impacting the integrity of the affected system. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with no impact on confidentiality or availability but with a low impact on integrity.

The vulnerability allows an attacker to perform unauthorized actions due to missing authorization controls. While confidentiality and availability are not affected, the integrity of the system can be compromised. There are no known exploits in the wild, and the impact is rated medium severity based on the CVSS score of 5.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor CyberChimps advisories for updates. Until a fix is available, restrict access to the affected functionality where possible and apply principle of least privilege to limit potential exploitation.