Vulnerability Bulletins

CVE-2025-61119

   
Affected software ANDROID
 
Kanova Android App version 1.0.27 (package name com.karelane), developed by Karely L.L.C., contains improper access control vulnerabilities. Attackers may gain unauthorized access to user details and obtain group information, including entry codes, by manipulating API request parameters. Successful exploitation could result in privacy breaches, unauthorized group access, and misuse of the platform.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-61119