5 matches found
CVE-2025-69727
CVE-2025-69727 Fornitore del Prodotto INDEX-EDUCATION Base di Codice del Prodotto Affetto PRONOTE - 202X.X.X 2025.2.8 Descrizione Esiste una vulnerabilità di Controllo degli Accessi Incorretto in INDEX-EDUCATION PRONOTE precedente alla versione 2025.2.8. I componenti interessati...
CVE-2025-69727
An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components index.js and composeUrlImgPhotoIndividu allow the construction of direct URLs to user profile images based solely on predictable identifiers such as user IDs and names. Due to...
CVE-2025-69727
An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components index.js and composeUrlImgPhotoIndividu allow the construction of direct URLs to user profile images based solely on predictable identifiers such as user IDs and names. Due to...
PT-2026-25793
An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components index.js and composeUrlImgPhotoIndividu allow the construction of direct URLs to user profile images based solely on predictable identifiers such as user IDs and names. Due to...
