CVE-2025-22931

OS4ED openSIS versions v7.0 through v9.1 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the /assets/stafffiles component. This vulnerability allows unauthenticated attackers to access files uploaded by staff members. To mitigate this risk until a patch is available, it is re...