mykiot KiotViet Sync

• CVE-2025-12675 Medium 4.3 KiotViet Sync <= 1.8.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.2%
• CVE-2025-12676 Medium 5.3 KiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass 0.3%
• CVE-2025-12674 Critical 9.8 KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload 0.8%
• CVE-2025-12677 Medium 5.3 KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure 0.3%