Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-40619

Improper access control vulnerability in Bookgy

Description

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bookgy Bookgy

Default version status: unaffected

  • all versionsaffected

References