{"id":"CVE-2025-52580","state":"PUBLISHED","title":"Insertion of sensitive information into log file issue exists in \"region PAY\" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacke","description":"Insertion of sensitive information into log file issue exists in \"region PAY\" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.","publishedAt":"2025-07-22T04:49:33.459Z","updatedAt":"2025-07-22T15:36:00.332Z","severity":{"score":2.4,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","source":"jpcert"},"assigner":"jpcert","products":["Gift Pad Co.,Ltd. \"region PAY\" App for Android"],"affected":[{"vendor":"Gift Pad Co.,Ltd.","product":"\"region PAY\" App for Android","versions":[{"version":"prior to 1.5.28","status":"affected"}]}],"references":["https://jvn.jp/en/jp/JVN07825095/"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/52xxx/CVE-2025-52580.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-52580","state":"PUBLISHED","datePublished":"2025-07-22T04:49:33.459Z","dateUpdated":"2025-07-22T15:36:00.332Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2025-07-15T01:02:40.018Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insertion of sensitive information into log file issue exists in \"region PAY\" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs."}],"affected":[{"vendor":"Gift Pad Co.,Ltd.","product":"\"region PAY\" App for Android","versions":[{"version":"prior to 1.5.28","status":"affected"}]}],"references":[{"url":"https://jvn.jp/en/jp/JVN07825095/"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_0":{"version":"3.0","baseSeverity":"LOW","baseScore":2.4,"vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}},{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","baseSeverity":"LOW","baseScore":2.4,"vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","description":"Insertion of sensitive information into log file","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2025-07-22T04:49:33.459Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-22T15:19:47.477187Z","id":"CVE-2025-52580","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-22T15:36:00.332Z"}}]}}}