Beveiligingsadvies

CVE-2025-65670

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-26 00:00:00

Laatst bijgewerkt 2026-07-05 01:21:07

Toegewezen door mitre

CVSS-score 4.3

Status PUBLISHED

Beschrijving

An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access.

← Alle CVE's bekijken Bekijk op cve.org ↗