CVE-2025-3660

Name of the Vulnerable Software and Affected Versions Petlibro Smart Pet Feeder Platform versions up to 1.7.31

Description An access control issue exists in the Petlibro Smart Pet Feeder Platform that allows authorized users to view data belonging to other users. This occurs because of a lack of proper ownership verification. An attacker can send requests to the /member/pet/detailV2 API endpoint with arbitrary pet IDs to obtain sensitive information, including pet details, member IDs, and avatar URLs, without authorization. The pet ID variable is used in the request to access the data.

Recommendations Versions prior to 1.7.31 should be updated.