VULNERABILITY INTELLIGENCE
CVE-2025-42604
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-04-23
Last modified2026-06-17
Description
This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.
Weakness classification
- vdisclose@cert-in.org.in: CWE-1295