CVE-2025-61220

The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to…

High · published October 21, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

⚡ An incomplete verification mechanism can let anyone waltz right into another user’s account in AutoBizLine's app! This is like a hotel where all guests use the same keycard, and the front desk never checks identity — just hand over that card and you’re in! Attackers can log in as other users, accessing their personal information without a trace. Imagine the chaos if someone stumbles into your hotel room and starts going through your belongings! The risk here is high — your data privacy is on the line!

Put simply

This is like a hotel where all guests use the same keycard, and the front desk never checks identity — just hand over that card and you’re in! The flaw in AutoBizLine version 1.2.91 allows unauthorized access by failing to properly verify user identities during the login process, compromising user data.

What to do

Attackers can log in as other users, accessing their personal information without a trace. Imagine the chaos if someone stumbles into your hotel room and starts going through your belongings! The risk here is high — your data privacy is on the line! Update to version 1.2.92 to patch this vulnerability immediately. Additionally, review your existing identity verification processes to ensure robust checks are in place. Don't forget to notify all users about this update! You've got this! By following these steps, you’ll reinforce your app’s security and protect your users! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.5th percentile
Published
2025-10-21T00:00Z
EPSS history
Timeline
  • 21 OCT 00:00Z
    The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to…
    cvelistv5