{"id":59605,"date":"2025-07-24T07:58:15","date_gmt":"2025-07-24T07:58:15","guid":{"rendered":""},"modified":"2025-10-21T03:36:20","modified_gmt":"2025-10-21T09:36:20","slug":"cve-2025-28965-critical-missing-authorization-vulnerability-in-md-yeasin-ul-haider-url-shortener","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-28965-critical-missing-authorization-vulnerability-in-md-yeasin-ul-haider-url-shortener\/","title":{"rendered":"CVE-2025-28965: Critical Missing Authorization Vulnerability in Md Yeasin Ul Haider URL Shortener<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-28965 is a high-risk cybersecurity vulnerability that affects versions of Md Yeasin Ul Haider URL Shortener up to 3.0.7. This vulnerability arises from a missing authorization flaw that potentially allows malicious actors to exploit functionalities that aren’t properly constrained by Access Control Lists (ACLs). The exploit can result in system<\/a> compromise or data leakage, posing significant threats to data integrity and security.
\nThis vulnerability matters to everyone who uses the Md Yeasin Ul Haider URL Shortener, as it could provide an attack vector for threat actors to compromise the system or access sensitive data<\/a>. With a CVSS Severity Score of 8.6, this issue cannot be ignored and must be addressed promptly to maintain a secure cyber environment.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-28965
\nSeverity: High (8.6 CVSS Severity Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n