Skip to content
OpenAdvisories

Vendor

Emaintenance

1 known vulnerabilities.

Products

Crazy Bubble Tea 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-14317

    User Enumeration in Crazy Bubble Tea mobile application

    In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a `loyaltyGuestId` parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 91…

    Emaintenance Crazy Bubble Tea