Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprinting, Session Hijacking.
CVSS 3.1HIGH 7.6·Network·Low privileges·No interaction·EPSS 0.00306·Published 2025-03-05·Fixed in 3.1.5CWE-359
