CVE-2025-56694
5.8MEDIUMClient-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.
Publicado: 8/27/2025Actualizado: 9/9/2025
Descripción
Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.
Análisis IAImpulsado por IA
Productos Afectados
lumasoftfotoshare_cloud
2025-03-13
Referencias
- https://fotoshare.co/Product
- https://inf0sectom.github.io/posts/fotoshareco/ExploitThird Party Advisory
- https://support.lumasoft.co/hc/en-us/articles/360046797573-Event-Privacy-and-Link-SharingProduct