CVE-2025-32220

Summary

CVE-2025-32220 is a critical vulnerability affecting the Dimitri Grassi Salon booking system. This issue involves a missing authorization control, allowing unauthorized access to sensitive information or functions. Exploitation is possible due to incorrectly configured access control security levels within the system. This vulnerability can potentially impact salon booking systems from version n/a through 10.10.7. Successful exploitation could lead to significant data breaches or system compromise. It is highly recommended that users upgrade to the latest patched version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.