Authorization Bypass in Ribblr iOS App by Authenticated User

Publication date: 2026-04-27

Last updated on: 2026-05-19

Assigner: National Cyber Security Centre Finland

Description

Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-27

Last Modified

2026-05-19

Generated

2026-07-06

AI Q&A

2026-04-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-15626

EUVD

EUVD-2025-209576

Affected Vendors & Products

Vendor	Product	Version / Range
ribblr	crochet_and_knitting	*
ribblr	crochet_and_knitting_ios_application	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated user of the Ribblr - Crochet & Knitting iOS application to bypass authorization controls. Essentially, even though the user is logged in, they can access or perform actions that should normally be restricted or require higher privileges.

Impact Analysis

The impact of this vulnerability is that an authenticated user could gain unauthorized access to features or data within the Ribblr iOS app. This could lead to exposure of sensitive information, unauthorized modifications, or misuse of app functionality that should be protected.

Hi! I’m here to help you understand CVE-2025-15626. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70