CVE-2025-29997

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts.

Score

CVSS 4.0 8.2 High

Status

Deferred - vdisclose@cert-in.org.in

Published

2025-03-13

Last modified

2025-03-13

Weaknesses

CWE-863

Affected products

• Cap Back Office Application (Rising Technosoft)

References

• https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0048