← Database

CVE-2025-12008

HIGH CVSS: 8.8 Published: 2026-05-14 Modified: 2026-06-17

Description

Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Yaay Social Media App: from 3.8.0 through 24102025.

Affected Platforms

Unknown

Weakness Type

CWE-639

References