4 matches found
CVE-2025-22931
An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...
7.5CVSS0.00474EPSS
SaveExploits0References2
CVE-2025-22931
An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...
6.6AI score0.00474EPSS
SaveExploits0References2
CVE-2025-22931
OS4ED openSIS versions v7.0 through v9.1 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the /assets/stafffiles component. This vulnerability allows unauthenticated attackers to access files uploaded by staff members. To mitigate this risk until a patch is available, it is re...
7.5CVSS7.2AI score0.00474EPSS
SaveExploits0References2Affected Software1
20