GCVE - cpe:2.3:a:profession_fit:profession

Approved changes feed: RSS · Atom

cpe:2.3:a:profession_fit:profession_fit:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Profession Fit (`9861bf0e-4a84-5af4-8b33-82f9638365ba`)
Product	Profession Fit (`c83c87b5-fd88-5d7b-89d9-22dd8eb76448`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59797`	vulnerable	2026-06-08 07:35:23.128719	Details available MEDIUM (5.8) Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page. Published: 2025-09-22T00:00:00.000Z Updated: 2025-09-22T15:37:43.428Z Open on db.gcve.eu Reference links https://www.profession-fit.de https://github.com/Henkel-CyberVM/CVEs/blob/main/CVE-2025-59797/README.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.