CVE-2025-57212

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Dec 4, 2025

CISA due date

—

The record

Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.

Affected packages

Ecosystem	Package	Introduced	Fixed