Profession Fit vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Profession Fit products: 1 record(s), with severity, exploitation and fixes.

Profession Fit 1

Exploited only (KEV) →

CVE-2025-59797 Medium · 5.8 CWE-425 Sep 22, 2025

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for…

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.