VULNERABILITY INTELLIGENCE

CVE-2025-41458

CVSS score5.5 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2025-07-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.

Weakness classification

  • a341c0d1-ebf7-493f-a84e-38cf86618674: CWE-312

Primary references