Insufficient Server-Side Validation in Meon KYC Solutions
CVE-2025-42601

8.2HIGH

Key Information:

Vendor

Meon

Status
Kyc Solutions
Vendor
CVE Published:
23 April 2025

What is CVE-2025-42601?

This vulnerability arises in Meon KYC Solutions due to a lack of adequate server-side validation of Captcha on specific API endpoints. An attacker can exploit this issue by intercepting API requests and removing the Captcha parameter, which results in the successful bypass of Captcha verification mechanisms. Proper validation measures and security protocols are essential to prevent such exploitation and safeguard sensitive user information.

Affected Version(s)

KYC solutions 1.1

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Mohit Gadiya.
JSON
.