The vulnerability identified as CVE-2025-58813 affects themearile Consultstreet up to version 3.0.0. It is caused by missing authorization controls stemming from incorrectly configured access control security levels. This allows an attacker with low privileges to bypass intended restrictions, resulting in limited integrity impact. The CVSS 3.1 score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact.

An attacker with low privileges can exploit the missing authorization to perform unauthorized actions that affect the integrity of the system. There is no impact on confidentiality or availability. No known exploits have been reported in the wild, indicating limited current exploitation risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.