Authorization Flaw in Bookgy Affects User Access Control

CVE-2025-40619

What is CVE-2025-40619?

The Bookgy application exhibits a significant flaw in its authorization control mechanisms across various sections. This vulnerability enables unauthorized users to access sensitive areas of the application, which are typically restricted to users with specific roles. Malicious actors can exploit this deficiency to bypass authentication requirements, potentially compromising sensitive information and user privacy within the application.

References