The vulnerability CVE-2025-49248 in cmoreira Team Showcase arises from missing authorization checks, which results in incorrectly configured access control security levels. This allows users with limited privileges to perform actions that should require higher authorization, potentially leading to integrity violations. The affected versions are all prior to 25.05.13. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

The impact is limited to integrity as unauthorized actions may be performed due to missing authorization controls. There is no impact on confidentiality or availability. The vulnerability requires low privileges to exploit and can be triggered remotely over the network. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected Team Showcase versions and review access control configurations to minimize risk.