Log in Start free

Vulnerability · Published Jul 28, 2025 · Assigned by VulDB

CVE-2025-8257Lobby Universe Lobby App com.maverick.lobby AndroidManifest.xml improper export of android application components

Medium 5.3

In plain English

A medium-severity security flaw in Lobby App from Lobby Universe. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 83.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.maverick.lobby. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

VendorProductVersions
Lobby Universe Lobby App 2.02.12.22.32.42.52.62.7

Weakness: CWE-926 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References