CVE-2025-65670

CVE-2025-65670 Uma Referência Direta a Objeto Insegura IDOR no classroomio 0.1.13 permite que alunos acessem endpoints confidenciais de administrador/professor ao manipular IDs de curso em URLs, resultando na divulgação não autorizada de dados confidenciais de curso, administrador e aluno. O...

CVE-2025-65670

CVE-2025-65670 describes an insecure direct object reference (IDOR) in classroomio 0.1.13. The issue lets students manipulate the URL course ID to access sensitive admin/teacher endpoints, causing unauthorized disclosure of course, admin, and student data. The leak is described as momentary befor...

CVE-2025-65670

An Insecure Direct Object Reference IDOR in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts t...