Vulnerability in Meon Kyc Solutions
CVE-2025-42602
This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through API request body leading to unauthorized access of other user accounts.
EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.
Affected products
- Meon Kyc Solutions — versions 1.1
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)