Description (CNA)
Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Profession Fit / Profession Fit | affected 5.0.99 Build 44910 |
CWE
CWE-425
References
- https://www.profession-fit.de
- https://github.com/Henkel-CyberVM/CVEs/blob/main/CVE-2025-59797/README.md
ADP enrichment
No English description supplied.
No references supplied.