CVE-2025-62086

Publication date

2025-12-09 14:52:19

Family

Patchstack

State

PUBLISHED

Description

Missing Authorization vulnerability in akazanstev Яндекс Доставка (Boxberry) boxberry allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Яндекс Доставка (Boxberry): from n/a through <= 2.32.