This vulnerability in Trustpilot Reviews arises from missing authorization checks, leading to incorrectly configured access control security levels. It affects versions up to 2.5.925 and allows an attacker with low privileges to access certain features or data without proper authorization. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, and no user interaction required, with limited confidentiality impact and no integrity or availability impact. No patch or official remediation details are currently available, and the product is not a cloud service.

The vulnerability could allow an attacker with some level of privileges to bypass authorization controls, potentially gaining access to information or functionality that should be restricted. The impact is limited to confidentiality with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in Trustpilot Reviews to ensure proper authorization enforcement. Monitor for updates from Trustpilot regarding patches or official mitigations.