Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-12008

IDOR in APPYAP's Yaay Social Media App

Description

Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc. Yaay Social Media App allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Yaay Social Media App: from 3.8.0 through 24102025.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

APPYAP Technology and Information Inc. Yaay Social Media App

Default version status: unaffected

  • 3.8.0 to ≤ 24102025affected

References