CVE-2025-3660

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 are affected by a broken access control vulnerability due to missing ownership verification. An authenticated user can access other users’ data by calling the API endpoint /member/pet/detailV2 with arbitrary pet IDs, exposing pet details, m...