Authorization Bypass Vulnerability in Yaay Social Media App by APPYAP Technology

CVE-2025-12008

What is CVE-2025-12008?

The Yaay Social Media App by APPYAP Technology and Information Inc. contains a vulnerability that allows unauthorized access due to improper Access Control List (ACL) constraints. This weakness stems from a user-controlled key feature, which can be exploited to bypass authorization checks, granting users access to functionalities that should be restricted. This issue affects versions from 3.8.0 to 24102025, highlighting the importance of immediate updates and security measures to protect user data and uphold application integrity.

References