CVE-2025-0615

—

CVSS 3.1

5.3 medium

EPSS

<1%p32

Published

Jan 21, 2025 (Jan 21, 2025)

Modified

Jun 17, 2026

Description

Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.

Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.