CVE-2025-1030CWE-359

Sensitive Data Exposure in Utarit Informatics' SoliClub

High · published December 18, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

⚡ Sensitive personal info is just a query away! The vulnerability in Utarit Informatics Services Inc.'s SoliClub lets unauthorized actors access private information—like leaving the front door wide open. 🔥 Think of this vulnerability like a restaurant with a poorly secured menu: anyone can sneak a peek at the kitchen's special recipes if they just ask for them, and they don’t even need a reservation! If exploited, an attacker could expose private personal information of users, leading to identity theft or data misuse. This is a serious breach of trust, potentially devastating for affected individuals who thought their data was safe!

Put simply

Think of this vulnerability like a restaurant with a poorly secured menu: anyone can sneak a peek at the kitchen's special recipes if they just ask for them, and they don’t even need a reservation! The vulnerability in SoliClub allows unauthorized access to sensitive personal information through misconfigured query systems, exposing user data without proper validation.

What to do

If exploited, an attacker could expose private personal information of users, leading to identity theft or data misuse. This is a serious breach of trust, potentially devastating for affected individuals who thought their data was safe! To safeguard your users, update SoliClub to version 5.3.7 or later immediately. Review your query system configurations to ensure authorization checks are in place. Regular audits of user data access will also help maintain security standards. You can tackle this! Follow the steps to secure your application and protect those user secrets. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00305 · 22.1th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-12-18T14:22Z
EPSS history
Timeline
  • 18 DEC 14:22Z
    Sensitive Data Exposure in Utarit Informatics' SoliClub
    cvelistv5