CVE-2025-64062

The Primakon Pi Portal version 1.0.18 contains an improper authorization vulnerability in the /api/V2/pp_users?email endpoint. The application fails to perform proper server-side validation of the email parameter against the authenticated session. An attacker can manipulate this parameter to an a...