CVE-2025-12008 — IDOR in APPYAP's Yaay Social Media App

CVE-2025-12008

IDOR in APPYAP's Yaay Social Media App PUBLISHED

Description (CNA)

Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Yaay Social Media App: from 3.8.0 through 24102025.

Affected (CNA)

Vendor / product	Versions
APPYAP Technology and Information Inc. / Yaay Social Media App	affected 3.8.0 through 24102025

CWE

CWE-639

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0238

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.