The vulnerability identified as CVE-2025-47564 affects the ashanjay EventON plugin, specifically versions up to 4.9.8. It is characterized by missing authorization controls, enabling unauthorized users to access functionality that should be restricted by ACLs. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact limited to availability. There is no evidence of confidentiality or integrity impact. The vulnerability is publicly disclosed but lacks vendor patch or mitigation details at this time.

The impact of this vulnerability is limited to availability, meaning that an attacker could potentially disrupt or degrade the availability of the affected EventON plugin functionality. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix information is available, users should monitor vendor communications for updates. Until a fix is released, restricting access to the affected EventON plugin or disabling it if feasible may reduce risk.