CVE-2025-25381

Description

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords.

References

https://www.tenable.com/cve/CVE-2025-25381

https://github.com/edwin-0990/CVE_ID/blob/main/CVE-2025-25381/README.md

https://github.com/advisories/GHSA-x2cr-cpw2-j9x5

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS