Profession Fit

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Profession Fit records in CISA KEV

No Profession Fit vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-37243 CVE-2025-59797 · GHSA-rhvx-hr6c-q6qj

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for…

HIGH 65

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00269 Published 2025-09-22 No fix listed CWE-425

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0