CVE-2025-22668

Summary

CVE-2025-22668 is a Missing Authorization vulnerability affecting the AwesomeTOGI Awesome Event Booking system. The flaw permits unauthorized access due to incorrectly configured access control security levels. This issue poses a risk for versions 2.7.2 and below of the Awesome Event Booking software. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information or perform unintended actions. Organizations using the Awesome Event Booking system are advised to update to the latest version or implement appropriate access control measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.