CVE-2024-12604

MEDIUM 6.5CVE-2024-12604 · Published 10/03/2025 · updated 17/06/2026

In short

CVE-2024-12604 is a MEDIUM (CVSS 6.5) vulnerability affecting tap&sign (tapandsign).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 10.4% of all vulnerabilities.
Fix: update to 1.025 or later.

Package	Affected versions	Patched versions
tap&sign tapandsign	`< 1.025`	`1.025`

Description

Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse. This issue affects Tap&Sign App: before V.1.025.

References

docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari · Release Notes
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0063
usom.gov.tr/bildirim/tr-25-0063 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free