PT-2025-30275 · Pavo Pay · Pavo Pay

Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-4129

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PAVO Pay versions prior to 13.05.2025

Description PAVO Pay is susceptible to an authorization bypass due to the exploitation of trusted identifiers through a user-controlled key.

Recommendations Update PAVO Pay to version 13.05.2025 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-4129

Affected Products

Pavo Pay

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-4129 · Security Note
• https://t.me/cvenotify/129690 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0166 · Note
• https://usom.gov.tr/bildirim/tr-25-0166 · Note
• https://twitter.com/CVEnew/status/1947300339041857832 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1947315295883825603 · Twitter Post