CVE-2025-13163

Publication date

2025-11-17 06:17:06

Family

twcert

State

PUBLISHED

Description

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.