CVE-2025-58681 describes a missing authorization vulnerability in Easy Quotes by Jürgen Müller, affecting versions up to 1.2.4. The vulnerability arises from incorrectly configured access control security levels, allowing unauthorized users to access resources or functions that should be restricted. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates the vulnerability is remotely exploitable over the network without privileges or user interaction, with low attack complexity and limited confidentiality impact. No official patch or vendor advisory is available, and no exploits have been reported in the wild.

The vulnerability allows unauthorized remote attackers to access certain data or functionality due to missing authorization controls. The impact is limited to confidentiality loss; integrity and availability are not affected. There are no reports of active exploitation, and the vulnerability does not require user interaction or privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations in Easy Quotes to ensure proper authorization enforcement. Monitoring for unusual access patterns may help detect attempts to exploit this vulnerability.