Is CVE-2024-13065 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-13065 being exploited in the wild.

How severe is CVE-2024-13065?

Medium severity, with a CVSS score of 6.3, published 3 September 2025.

Which products and versions are affected?

AKINSOFT MyRezzta s2.02.02 to v2.05.01.

Is there a fix for CVE-2024-13065?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-13065 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2024-13065?

Check whether you run AKINSOFT MyRezzta at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-13065: Akinsoft MyRezzta resource consumption and workflow bypass

CVE-2024-13065 · Severity: medium · CVSS 6.3 · Published 2025-09-03

Akinsoft MyRezzta, a restaurant management and reservation platform, contains a vulnerability that allows for resource exhaustion and workflow manipulation. An attacker could exploit this to flood the system with data, potentially causing service slowdowns or outages that disrupt business operations and customer bookings. The issue is resolved in version 2.05.01.

Technologies: AKINSOFT MyRezzta. Vendors: AKINSOFT.

Quick answers

Is CVE-2024-13065 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-13065 being exploited in the wild.
How severe is CVE-2024-13065?: Medium severity, with a CVSS score of 6.3, published 3 September 2025.
Which products and versions are affected?: AKINSOFT MyRezzta s2.02.02 to v2.05.01.
Is there a fix for CVE-2024-13065?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-13065 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-13065?: Check whether you run AKINSOFT MyRezzta at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from CWE-841 (Improper Enforcement of Behavioral Workflow) and CWE-400 (Uncontrolled Resource Consumption) within the Akinsoft MyRezzta application. A remote attacker can exploit these weaknesses to perform input data manipulation and flooding (CAPEC-125), leading to a denial-of-service condition or unauthorized workflow transitions. The attack vector is network-based and requires minimal user interaction, though it does not require prior authentication. The issue affects versions starting from s2.02.02 and is fixed in version v2.05.01.

Affected products

Akinsoft MyRezzta s2.02.02 to v2.05.01

Timeline

2025-09-03: disclosed
2025-09-03: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.