Medium · 5.8 CVE-2025-56694 EUVD-2025-25903GHSA-gj6q-rc8v-2p54

Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protec…

Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by mitre

Description

Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.

References

https://fotoshare.co/
https://support.lumasoft.co/hc/en-us/articles/360046797573-Event-Privacy-and-Link-Sharing
https://inf0sectom.github.io/posts/fotoshareco/