CVE-2025-60982

The Educare ERP version 1.0 (2025-04-22) contains an Insecure Direct Object Reference (IDOR) vulnerability. The root cause is a failure to enforce proper authorization checks on affected API endpoints, which allows authenticated users to access or modify sensitive records belonging to other users...