CVE-2025-13163

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

More information : https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html