CVE-2025-61117

The Senza: Keto & Fasting Android App (package name com.gl.senza ), version 2.10.15 , developed by Paul Itoi, contains an improper access control vulnerability (CWE-284 ). The root cause is insufficient checks within the application's user data API endpoints , which allows attackers to bypass int...

CVE-2025-61117

Senza: Keto & Fasting Android App version 2.10.15 package name com.gl.senza, developed by Paul Itoi, contains an improper access control vulnerability. By exploiting insufficient checks in user data API endpoints, attackers can obtain authentication tokens and perform account takeover. Successful...