CVE-2025-54599

The Bevy Event service (used for eBay Seller Events and other activities) versions through 2025-07-22 is vulnerable to account takeover due to an SSO misconfiguration . If SSO is enabled, an attacker can exploit this by creating their own account and performing an SSO login after a victim changes...