What’s Vulnerable › Vulnerabilities
CVE-2025-41458: Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-21 · updated 2026-06-17
- Weakness: CWE-312
Description
Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.
Affected products
- Two App Studio Journey: through 5.5.9
References
Get alerted when CVE-2025-41458 or the next vulnerability affects your stack