CVE-2025-25450

Description

An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint

Affected Platforms

Weakness Type

CWE-287

References

• https://piuswalter.de/blog/2fa-bypass-and-deactivation-attack-in-mytaag/