CVE Intelligence

Vulnerabilidades do Emaintenance Crazy Bubble Tea

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Emaintenance Crazy Bubble Tea: 1 registro(s), com versões afetadas e correções.

CVE-2025-14317 Alta · 7.1 CWE-359 14/01/2026
User Enumeration in Crazy Bubble Tea mobile application
In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a `loyaltyGuestId` parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 915 (Android) and 7.4.1 (iOS).