High · 7.5 CVE-2025-25381 EUVD-2025-7670GHSA-x2cr-cpw2-j9x5

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information …

Published Mar 6, 2025 · Updated Mar 12, 2025 · Assigned by mitre

Description

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords.

References

https://github.com/edwin-0990/CVE_ID/blob/main/CVE-2025-25381/README.md
https://www.tenable.com/cve/CVE-2025-25381
https://github.com/advisories/GHSA-x2cr-cpw2-j9x5