CVE-2025-32367

creationtimestamp| type| source ---|---|--- 2025-04-11 17:47:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320580689943832 2025-04-11 17:51:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11469 2025-04-11 19:43:17+00:00| seen|...

CVE-2025-32367

The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions...

CVE-2025-32367

CVE-2025-32367 affects the Oz Forensics face recognition application prior to version 4.0.8 (late 2023). The root cause is an Insecure Direct Object Reference flaw in the /statistic/list endpoint, which could allow retrieval of PII. Public references from NVD/Red Hat describe the vulnerability, w...

CVE-2025-32367

The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions...