PT-2025-30418 · Unknown · Deepfiction Ai

Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-51867

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Deepfiction AI versions prior to June 3, 2025

Description An Insecure Direct Object Reference (IDOR) vulnerability exists in Deepfiction AI. This allows attackers to access and utilize other users' credits for interacting with the Large Language Model (LLM). The vulnerability is exploitable through the /browse/stories endpoint, which exposes sensitive information.

Recommendations Restrict access to the /browse/stories endpoint.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-51867

Affected Products

Deepfiction Ai

References · 5

• 🔥 https://github.com/Secsys-FDU/CVE-2025-51867 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51867 · Security Note
• https://t.me/CVEtracker/28380 · Telegram Post
• https://twitter.com/CVEnew/status/1947662670880031157 · Twitter Post
• https://t.me/cvetracker/28380 · Telegram Post