CVE-2025-14317 | Emaintenance Crazy Bubble Tea App up to 7.4.0/914 loyaltyGuestId private personal information

January 14, 2026 Yanac

A vulnerability was found in Emaintenance Crazy Bubble Tea App up to 7.4.0/914. It has been rated as problematic. The impacted element is an unknown function. The manipulation of the argument loyaltyGuestId leads to exposure of private personal information to an unauthorized actor.

This vulnerability is uniquely identified as CVE-2025-14317. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More