PT-2025-13514 · Meetme · Meetme

Published 2025-03-28 · Updated 2025-03-28 · CVE-2025-2910

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MeetMe versions prior to 2024-09

Description The issue concerns user enumeration in the password reset module of the MeetMe authentication service. This allows an attacker to determine whether an email address is registered through specific error messages.

Recommendations For versions prior to 2024-09, update to a version released after 2024-09 to resolve the issue. As a temporary workaround, consider restricting access to the password reset module to minimize the risk of exploitation. Avoid using the password reset feature with unverified email addresses until the issue is resolved.

Fix

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2025-2910

Affected Products

Meetme

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-2910 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fermax-mobile-applications · Note
• https://t.me/cvedetector/21413 · Telegram Post
• https://t.me/cvetracker/20182 · Telegram Post
• https://twitter.com/CVEnew/status/1905674348314403220 · Twitter Post