CVE-2025-59686

Kazaar version 1.25.12 , a print marketing fulfillment platform, is vulnerable to an Insecure Direct Object Reference (IDOR) attack. The vulnerability exists because the software allows calls to the /api/v1/org-id/orders/order-id/documents API endpoint with a modified order-id parameter. This fla...