CVE-2025-61220

Published: Oct 21, 2025Modified: Jul 5, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to their personal information.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://autobizline.com/secondline/user/get_user/

Source: cve@mitre.org

https://github.com/syz913/CVE-reports/blob/main/CVE-2025-61220.md

Source: cve@mitre.org

Timeline

No history available yet.