CVE-2025-1031
Authorization Bypass in SoliClub 5.2.4–5.3.7 Enables Functionality Misuse
Publication date: 2025-12-18
Last updated on: 2025-12-18
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| utarit_informatics_services_inc | soliclub | 5.2.4 |
| utarit_informatics_services_inc | soliclub | 5.3.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-639 | The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Authorization Bypass Through User-Controlled Key in Utarit Informatics Services Inc. SoliClub software versions from 5.2.4 before 5.3.7. It allows misuse of functionality by bypassing authorization controls due to manipulation of user-controlled keys.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to certain functionalities or data within the SoliClub application, potentially allowing attackers to bypass security controls and access sensitive information without proper authorization.