CVE-2021-25648

—

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Feb 16, 2021 (Feb 16, 2021)

Modified

Jun 17, 2026

Description

Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters "isAdmin" and "isPremium" located on device storage.

Vendors: testes-codigo
Products: testes de codigo
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.