CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

CVE-2025-59797: Direct Request

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

Profession Fit 安全漏洞

Profession Fit is a health and employee wellness app from German company Profession Fit. A security vulnerability exists in Profession Fit version 5.0.99 Build 44910, which stems from the fact that a direct request to a URL such as /api/challenges/id may result in authorization bypass...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 contains an authorization bypass vulnerability. The issue allows access via a direct request to the API endpoint /api/challenges/{id} and direct URL access to the eversports, user-management, and plane pages, indicating insufficient access control on these resour...