CVE-2025-52580

2.4 lowEPSS 0.2%

Low (2.4). EPSS 0.2% chance of exploitation in the next 30 days.

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

Severity

CVSS 4.0

2.4 low

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.0

2.4 low

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN07825095/

Check your stack JSON