CVE-2025-0606
BaseFortify
Publication date: 2025-10-06
Last updated on: 2025-10-06
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| logo_software_inc | logo_cloud | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Authorization Bypass Through User-Controlled Key in Logo Software Inc. Logo Cloud before version 0.67. It allows attackers to perform Forceful Browsing and causes Resource Leak Exposure, meaning unauthorized users might access restricted resources or data by manipulating keys.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to sensitive resources or data due to authorization bypass. This can result in data leaks, potential data manipulation, and disruption of service availability.