Vulnerability in Meon Kyc Solutions
CVE-2025-42601
This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter leading to bypassing the Captcha verification mechanism.
EPSS: 0.004 (33.5th percentile) — read the EPSS interpretation.
Affected products
- Meon Kyc Solutions — versions 1.1
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)