Crazy Bubble Tea Mobile Application Personal Information Exposure Vulnerability
Vulnerability
A vulnerability exists in the Crazy Bubble Tea mobile application, allowing authenticated attackers to access personal information of other users by manipulating the 'loyaltyGuestId' parameter. The server fails to properly validate permissions before disclosing this data. This issue affects all versions prior to 915 on Android and 7.4.1 on iOS.
Impact
Exploitation of this vulnerability could lead to unauthorized access to personal information of users within the application.
Remediation
Users can update to version 915 on Android or 7.4.1 on iOS to address this vulnerability.
Added: Jan 14, 2026, 2:19 PM
Updated: Jan 14, 2026, 5:15 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
5.2remediation
0.0relevance
2.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.