Vulnerabilidades de Emaintenance

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Emaintenance: 1 registro(s), com severidade, exploração e correções.

Crazy Bubble Tea 1

Somente exploradas (KEV) →

CVE-2025-14317 Alta · 7.1 CWE-359 14/01/2026

User Enumeration in Crazy Bubble Tea mobile application

In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a `loyaltyGuestId` parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 915 (Android) and 7.4.1 (iOS).