Description
Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.
Published: 2025-01-21
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

The reported vulnerabilities have been resolved by Qualifio.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-1792 Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.
History

Tue, 21 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 21 Jan 2025 12:00:00 +0000

Type Values Removed Values Added
Description Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.
Title Input validation vulnerability in Qualifio's Wheel of Fortune
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: INCIBE

Published:

Updated: 2025-01-21T14:45:26.167Z

Reserved: 2025-01-21T09:15:40.992Z

Link: CVE-2025-0615

cve-icon Vulnrichment

Updated: 2025-01-21T14:45:21.676Z

cve-icon NVD

Status : Deferred

Published: 2025-01-21T12:15:27.737

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-0615

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses