PT-2025-51473 · Menulux Software · Menulux Mobile App

Osman Barutcu · Published 2025-12-16 · Updated 2025-12-16 · CVE-2025-13474

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Menulux Software Inc. Mobile App versions prior to 9.5.8

Description An authorization bypass exists in the Menulux Software Inc. Mobile App due to a vulnerability related to user-controlled keys and the exploitation of trusted identifiers. This allows unauthorized access. The vulnerability impacts the application's authorization mechanisms, potentially allowing malicious actors to bypass security checks.

Recommendations Update the Menulux Software Inc. Mobile App to version 9.5.8 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-13474

Affected Products

Menulux Mobile App

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-13474 · Security Note
• https://t.me/cveNotify/145920 · Telegram Post
• https://t.me/CVEtracker/39953 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0457 · Note