{"id":"CVE-2025-5098","aliases":["EUVD-2025-28381","GHSA-fg6v-mffr-f5c5"],"status":"published","title":"KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure","description":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00313,"percentile":0.24425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-313"],"published":"2025-05-23T01:06:25Z","modified":"2026-06-17T09:47:11Z","products":[{"vendor":"dynamixsoftware","product":"printershare"},{"vendor":"mobile dynamix","product":"printershare mobile print"}],"references":[{"url":"https://korelogic.com/Resources/Advisories/KL-001-2025-003.txt","tags":["third-party-advisory","exploit","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5098"},{"url":"https://github.com/advisories/GHSA-fg6v-mffr-f5c5"}],"sources":{"cve":[{"id":"CVE-2025-5098","title":"KL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure","description":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.","status":"published","published":"2025-05-23T01:06:25.126Z","modified":"2025-05-23T15:40:02.026Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-200","CWE-313"],"updated_at":"2026-11-02T14:32:29.97618Z"}],"euvd":[{"id":"EUVD-2025-28381","description":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.","status":"published","published":"2025-05-23T01:06:25Z","modified":"2025-05-23T15:40:02Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T20:32:39.383071Z"}],"ghsa":[{"id":"GHSA-fg6v-mffr-f5c5","title":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be...","description":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.","status":"published","published":"2025-05-23T03:32:38Z","modified":"2025-05-23T18:33:07Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:02:26.348006Z"}],"nvd":[{"id":"CVE-2025-5098","description":"PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.","status":"published","published":"2025-05-23T02:15:21.087Z","modified":"2026-06-17T09:47:11.543Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-200","CWE-313"],"updated_at":"2026-11-02T14:11:09.562272Z"}]}}