CVE-2025-42604

Published Apr 23, 2025 Modified Apr 15, 2026 CWE-1295

Description

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.

Weakness Type (CWE)

CWE-1295 CWE-1295

References

Frequently Asked Questions

What is CVE-2025-42604? +
This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related information.
How do I check if I'm vulnerable to CVE-2025-42604? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2025-42604 — free, no signup required.

Start Free Scan