CVE-2025-25450

Name of the Vulnerable Software and Affected Versions MyTaag versions prior to 2024-11-24

Description The issue allows a remote attacker to escalate privileges by deactivating the activated second factor via the "/session" endpoint.

Recommendations For versions prior to 2024-11-24, consider disabling access to the "/session" endpoint until a fix is available. As a temporary workaround, restrict the ability to deactivate the second factor to prevent privilege escalation.