CVE-2025-42604
This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Deferred - vdisclose@cert-in.org.in
- Published
- 2025-04-23
- Last modified
- 2025-04-23
- Weaknesses
- CWE-1295
Affected products
References
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0082
