Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental pin feature via unspecified vectors.
https://pastebin.com/mFM1a3CP
Source: Mitre, NVD
Published: 2025-07-01
Updated: 2025-07-03
Base Score: 5.7
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:P/A:P
Severity: Medium
Base Score: 6.1
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L
EPSS: 0.00012