Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/05 12:7 a.m.4 views

CVE-2025-3660

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to...

6.9CVSS6.3AI score0.00032EPSS
Exploits0References1
OSV
OSV
added 2026/01/04 12:15 a.m.2 views

CVE-2025-3660

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to...

8.2CVSS5.8AI score0.00032EPSS
Exploits0References2
NVD
NVD
added 2026/01/04 12:15 a.m.1 views

CVE-2025-3660

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to...

8.2CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2026/01/03 11:33 p.m.9 views

CVE-2025-3660

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 are affected by a broken access control vulnerability due to missing ownership verification. An authenticated user can access other users’ data by calling the API endpoint /member/pet/detailV2 with arbitrary pet IDs, exposing pet details, m...

8.2CVSS6AI score0.00032EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/03 11:33 p.m.1 views

CVE-2025-3660 Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpoint

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to...

6.9CVSS6AI score0.00032EPSS
Exploits0References2
Rows per page
Query Builder