Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2025-11598

Exposure of Confidential Information in mObywatel application

Description

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended (reopening the app would require the user to log in). The data exposed depends on the last application view displayed before the application was minimized This issue was fixed in version 4.71.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Centralny Ośrodek Informatyki mObywatel

Default version status: unaffected

  • 0 to < 4.71.0affected

References