Auth bypass in Ribblr Crotchet And Knitting
CVE-2025-15626
Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS application
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.001 (15.8th percentile) — read the EPSS interpretation.
Affected products
- Ribblr Crotchet And Knitting — versions 2.5