CVE-2025-26522 in RupeeWebИнформация

Сводка

по MITRE • 14.02.2025

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses.

Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

CERT-In

Резервировать

12.02.2025

Раскрытие

14.02.2025

Модерация

принято

Вход

VDB-295824

EPSS

0.00393

KEV

Нет

Деятельности

Очень низкий

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-26522
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-26522
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-26522/

◂ ПредыдущийОбзорДалее ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!