CVE-2025-54599
Last modified
CVE-2025-54599 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows account takeover, if SSO is used, when a victim changes the email address that they have configured. To exploit this, an attacker would create their own account and perform an SSO login. The root cause of the issue is SSO misconfiguration.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bevy | Events And Groups | <= 2025-07-22 |
References
- https://gist.github.com/deep1chil/558e8da919690a634bec684e7c4d0ffeExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-54599?
How severe is CVE-2025-54599?
How do I fix CVE-2025-54599?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-54593FreshRSS is a free, self-hostable RSS aggregator. In version…7.2
- CVE-2025-54594react-native-bottom-tabs is a library of Native Bottom Tabs …9.1
- CVE-2025-54595Pearcleaner is a free, source-available and fair-code licens…7.3
- CVE-2025-54596Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025…4.3
- CVE-2025-54597LinuxServer.io Heimdall before 2.7.3 allows XSS via the q pa…6.1
- CVE-2025-54598The Bevy Event service through 2025-07-22, as used for eBay …6.5
- CVE-2025-54601An issue was discovered in the Wi-Fi driver in Samsung Mobil…7
- CVE-2025-54602An issue was discovered in the Wi-Fi driver in Samsung Mobil…7
- CVE-2025-54603An incorrect OIDC authentication flow in Claroty Secure Acce…6.5
- CVE-2025-54604Bitcoin Core through 29.0 allows Uncontrolled Resource Consu…7.5
- CVE-2025-54605Bitcoin Core through 29.0 allows Uncontrolled Resource Consu…7.5
- CVE-2025-54606Status verification vulnerability in the lock screen module.…7.1
Are you affected by CVE-2025-54599?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST