Sensitive User Information Exposure in Merchants Union Finance iOS Application
CVE-2025-25326

5.5MEDIUM

Key Information:

Vendor

Merchants Union Consumer Finance Company Limited

Status
Merchants Union Finance
Vendor
CVE Published:
27 February 2025

What is CVE-2025-25326?

A vulnerability in the Merchants Union Finance iOS application version 6.19.0 allows attackers to exploit a crafted link, potentially leading to unauthorized access to sensitive user information. This flaw raises critical concerns for user privacy and data security, making it imperative for users to update their applications and for the vendor to release security patches promptly.

References

https://github.com/ZhouZiyi1/Vuls/blob/main/250115-Mercha...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-25326 : Sensitive User Information Exposure in Merchants Union Finance iOS Application