CVE-2025-41099

creationtimestamp| type| source ---|---|--- 2025-09-30 11:57:19+00:00| seen| Telegram/w4e6e3CJI-vqgIBeXbl1L0fNv2ARgsNQIkyQilgYEy2e0...

CVE-2025-41099

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the list of permissions using unauthorised internal identifiers...