Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-0987

IDOR in CB Project's CVLand

Description

Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection. This issue affects CVLand: from 2.1.0 through 20251103. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CB Project Ltd. Co. CVLand

Default version status: unknown

  • 2.1.0 to ≤ 20251103affected

References