CVE-2021-25648

2021-02-1614:45:08

mitre

www.cve.org

mobile application

security vulnerability

administrative access

premium features

tampering

device storage.

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Mobile application “Testes de Codigo” 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters “isAdmin” and “isPremium” located on device storage.

References

vrls.ws/posts/2021/02/cve-2021-25648-mobile-application-testes-de-codigo-privilege-escalation/