Skip to content
OpenAdvisories
High · 8.8 CVE-2025-12008 EUVD-2025-209841GHSA-j2gg-fc46-32rv

IDOR in APPYAP's Yaay Social Media App

Published May 14, 2026 · Updated May 14, 2026 · Assigned by TR-CERT

Description

Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Yaay Social Media App: from 3.8.0 through 24102025.

Affected products

VendorProductAffectedFixed
APPYAP Technology and Information Yaay Social Media App 3.8.0 – ≤ 24102025 —

References