CVE Catalog
CVE-2025-45157
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.
Risk Assessment
The organization risks exposure of sensitive user location data, potentially leading to privacy breaches and legal consequences.
Recommendation
Immediately update Splashin to the latest version and review the configuration of location data access permissions.
Original NVD description (English source)
Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.