A vulnerability has been found in Verysync 微力同步 2.21.3 and classified as problematic. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure.
This vulnerability is reported as CVE-2025-14198. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
