Vulnerability in Meon Kyc Solutions
CVE-2025-42604
This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.
EPSS: 0.005 (37.5th percentile) — read the EPSS interpretation.
Affected products
- Meon Kyc Solutions — versions 1.1
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)