CVE-2025-65670

CVE-2025-65670 Una referencia directa a objetos insegura IDOR en classroomio 0.1.13 permite a los estudiantes acceder a endpoints sensibles de administradores/profesores mediante la manipulación de IDs de cursos en las URL, lo que resulta en la divulgación no autorizada de datos sensibles del...

CVE-2025-65670

CVE-2025-65670 describes an insecure direct object reference (IDOR) in classroomio 0.1.13. The issue lets students manipulate the URL course ID to access sensitive admin/teacher endpoints, causing unauthorized disclosure of course, admin, and student data. The leak is described as momentary befor...

CVE-2025-65670

An Insecure Direct Object Reference IDOR in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts t...