Insufficiently Protected Credentials in EasyFlow GP by Digiwin

CVE-2025-13163

What is CVE-2025-13163?

EasyFlow GP, developed by Digiwin, is susceptible to an Insufficiently Protected Credentials vulnerability. This flaw allows remote attackers with elevated privileges to access plaintext database account credentials through the system's frontend. Exploitation of this vulnerability can lead to unauthorized access to sensitive data and compromise system integrity. Organizations using EasyFlow GP should apply the necessary patches to mitigate this risk.

References