VULNERABILITY INTELLIGENCE

CVE-2025-52580

CVSS score2.4 LOW
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-07-22
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references