CVE-2025-0606

Logo Cloud by Logo Software Inc. is affected by CVE-2025-0606 due to an authorization bypass caused by a user-controlled key. This flaw enables forceful browsing and potential resource disclosure on Logo Cloud versions before 0.67. The issue’s root cause is the improper handling of keys that gran...