CVE-2025-3660: falha de média gravidade em Petlibrio Smart Pet Feeder Platform
Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpoint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.2%
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to retrieve sensitive information including pet details, member IDs, and avatar URLs without proper authorization checks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Petlibrio · Smart Pet Feeder PlatformCVEs relacionadas — Petlibrio Smart Pet Feeder Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2025-15115MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authentication Bypass via API endpointEPSS 0.3%CVE-2025-3654MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointEPSS 0.3%CVE-2025-3653MEDIUMPetlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointEPSS 0.3%CVE-2025-3652MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpointEPSS 0.2%CVE-2025-3646MEDIUMPetlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share APIEPSS 0.2%