CVE-2025-51682 affects mJobtime 15.7.2 and arises from improper authorization enforcement on the client side. Because authorization checks are performed client-side, an attacker can alter the client code to bypass restrictions and access administrative features. Additionally, attackers can craft requests mimicking legitimate client-side calls to invoke administrative functions without proper authorization. This vulnerability is classified under CWE-602 (Improper Authorization) and has a critical CVSS 3.1 base score of 9.8, reflecting network attack vector, low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated attacker to gain full administrative access to the affected mJobtime instance, compromising confidentiality, integrity, and availability of the system. This could lead to unauthorized data access, modification, and potential disruption of service.

No official patch or fix is currently available for this vulnerability. Since the issue stems from client-side authorization, mitigation requires vendor intervention to implement proper server-side authorization checks. Until a fix is released, restrict access to the affected version 15.7.2 instances and monitor for suspicious activity. Check the vendor advisory regularly for updates on remediation.