CVE-2025-65670

An Insecure Direct Object Reference (IDOR) vulnerability in classroomio version 0.1.13 allows students to access sensitive admin and teacher endpoints. By manipulating course IDs in the URL, an attacker can bypass authorization checks and gain momentary access to privileged information, including...