VULNERABILITY INTELLIGENCE
CVE-2025-0615
CVSS score5.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.
Weakness classification
- cve-coordination@incibe.es: CWE-22