The vulnerability CVE-2025-47528 affects pewilliams Ovation Elements versions up to 1.1.2 and is due to missing authorization controls. This misconfiguration allows exploitation of access control security levels, enabling users with low privileges to perform unauthorized actions that can affect data integrity. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No patch or vendor advisory is currently provided, and no known exploits exist in the wild.

The impact is limited to integrity, meaning unauthorized users may be able to modify data or perform actions they should not be allowed to. There is no impact on confidentiality or availability. The vulnerability requires network access and low privileges, but no user interaction. No known exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Ovation Elements to ensure proper authorization enforcement. Monitor for vendor updates and apply patches promptly once available.