Vulnerability in Rising Technosoft Cap Back Office Application
CVE-2025-29996
This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanism in its API based login. A remote attacker with valid credentials could exploit this vulnerability by manipulating API…
EPSS: 0.004 (32.7th percentile) — read the EPSS interpretation.
Affected products
- Rising Technosoft Cap Back Office Application — versions <2.0.4
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vdisclose@cert-in.org.in (third-party-advisory)
Frequently asked questions
- What is CVE-2025-29996?
- CVE-2025-29996 is a vulnerability in Rising Technosoft Cap Back Office Application, classified under Authentication Bypass Using an Alternate Path or Channel. Published 2025-03-13.
- Is CVE-2025-29996 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.