VULNERABILITY INTELLIGENCE

CVE-2021-25648

CVSS score9.8 CRITICAL
EPSS probability1.21%
CISA KEVNot currently listed
Published2021-02-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters "isAdmin" and "isPremium" located on device storage.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references