Senza: Keto & Fasting Android App version 2.10.15 (package name com.gl.senza), developed by Paul Itoi, contains an improper access control vulnerability. By exploiting insufficient checks in user data API endpoints, attackers can obtain authentication tokens and perform account takeover. Successful exploitation could result in unauthorized account access, privacy breaches, and misuse of the platform.
References
Configurations
No configuration.
History
30 Oct 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
30 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-30 16:15
Updated : 2025-10-30 21:15
NVD link : CVE-2025-61117
Mitre link : CVE-2025-61117
CVE.ORG link : CVE-2025-61117
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control