Authorization Bypass Vulnerability in 1003 Mortgage Application by Lenderd

CVE-2025-22591

What is CVE-2025-22591?

The Lenderd 1003 Mortgage Application contains a Missing Authorization vulnerability, which enables attackers to exploit improperly configured access control security levels. This flaw can potentially allow unauthorized users to gain access to sensitive data and functionalities within the application. The affected versions span from n/a to 1.87, highlighting the importance of proper configuration and security best practices to mitigate potential risks.

References