PT-2025-11632 · Safe App · Safe App

Published 2025-03-18 · Updated 2025-03-19 · CVE-2025-25595

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Safe App version a3.0.9

Description A lack of rate limiting in the login page allows attackers to bypass authentication via a brute force attack.

Recommendations For Safe App version a3.0.9, consider implementing rate limiting on the login page to prevent brute force attacks. As a temporary workaround, restrict access to the login page or implement additional authentication measures to minimize the risk of exploitation.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-25595

Affected Products

Safe App

References · 8

• 🔥 https://pastebin.com/t8FthPaF · Exploit
• https://osv.dev/vulnerability/CVE-2025-25595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25595 · Security Note
• https://t.me/cvetracker/19390 · Telegram Post
• https://twitter.com/CVEnew/status/1902039049608802390 · Twitter Post
• https://t.me/cvedetector/20591 · Telegram Post
• https://twitter.com/Ravenzbb/status/1902372016285790610 · Twitter Post
• https://play.google.com/store/apps/details?id=com.iitb.cse.arkenstone.safe_v2 · Note