Crotchet And Knitting
Monthly
Authorization bypass in Ribblr Crochet & Knitting iOS version 2.5 allows authenticated users to access resources belonging to other users by manipulating user-controlled object identifiers, a class of flaw defined by CWE-639 (IDOR). The vulnerability is network-exploitable with low privilege and no user interaction required, but is constrained to confidentiality impact only - no integrity or availability exposure. No active exploitation has been confirmed (CISA KEV absent), and the EPSS score of 0.04% at the 11th percentile reflects minimal real-world exploitation probability at time of analysis.
Authorization bypass in Ribblr Crochet & Knitting iOS version 2.5 allows authenticated users to access resources belonging to other users by manipulating user-controlled object identifiers, a class of flaw defined by CWE-639 (IDOR). The vulnerability is network-exploitable with low privilege and no user interaction required, but is constrained to confidentiality impact only - no integrity or availability exposure. No active exploitation has been confirmed (CISA KEV absent), and the EPSS score of 0.04% at the 11th percentile reflects minimal real-world exploitation probability at time of analysis.