CVE-2025-61220

CVSS 7.5 HIGHEPSS 0.3%CWE-200

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 oct 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to their personal information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://autobizline.com/secondline/user/get_user/https://github.com/syz913/CVE-reports/blob/main/CVE-2025-61220.md