CVE Catalog
CVE-2025-9210
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.16%
5th percentile - higher than 5% of all known CVEs
Summary
Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System before version 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs.
Risk Assessment
The risk is the possibility of authenticated users gaining higher privileges, which could lead to unauthorized data access.
Recommendation
It is recommended to update the system to version 2.22.0 or later, which includes the JWT signature validation fix.
Original NVD description (English source)
Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs