CVE-2025-59797

Published September 22nd, 2025

View on NVD ↗

CVSS v3

5.8

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

Henkel-CyberVM/CVEs

CVE reports created by Henkel AG & Co. KGaA's Cyber Defense team.

GitHub