Authorization Flaw in Bookgy Affects User Access Control
CVE-2025-40619

9.3CRITICAL

Key Information:

Vendor

Bookgy

Status
Bookgy
Vendor
CVE Published:
29 April 2025

What is CVE-2025-40619?

The Bookgy application exhibits a significant flaw in its authorization control mechanisms across various sections. This vulnerability enables unauthorized users to access sensitive areas of the application, which are typically restricted to users with specific roles. Malicious actors can exploit this deficiency to bypass authentication requirements, potentially compromising sensitive information and user privacy within the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Bookgy all versions

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

David UtĂłn Amaya (m3n0sd0n4ld)
JSON
.