Eastnets PaymentSafe Improper Authorization Vulnerability in URL Handler

Vulnerability

A vulnerability allowing improper authorization has been identified in Eastnets PaymentSafe version 2.5.26.0. The issue arises in an unknown functionality of the file Default.aspx within the URL Handler component. This vulnerability can be exploited remotely, and has been disclosed publicly. Upgrading to version 2.5.27.0 addresses this issue.

Impact

Exploitation of this vulnerability could lead to unauthorized access or actions within the application, bypassing normal authorization mechanisms.

Remediation

Users can upgrade to Eastnets PaymentSafe version 2.5.27.0 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
5.2
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.