CVE-2025-55886

CVE-2025-55886 描述 在ARD中发现了一个不安全的直接对象引用（IDOR）漏洞。该漏洞存在于支付历史API端点的feuid参数中。已认证的攻击者可以操纵此参数，未经授权访问其他用户的支付历史。 受影响组件 https://services.ard.fr/?eID=txafereloadrecords&dc=1743696277812&feuid=USERID&startTimestamp=1741017877&endTimestamp=1743782677&mobile=1&page=1&start=0&limit=100 受影响的产品代码库 ARD GEC en Lign...

EUVD-2025-30793

Malicious code in bioql PyPI...

CVE-2025-55886

An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization...

CVE-2025-55886

An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization...

CVE-2025-55886

An Insecure Direct Object Reference (IDOR) vulnerability exists in ARD GEC en Ligne (an online service portal of ARD France). The flaw is located in the fe_uid parameter of the payment history API endpoint . An authenticated attacker can manipulate this parameter to gain unauthorized access to th...

ARD GEC en Ligne 安全漏洞

ARD GEC en Ligne is an online service portal of ARD France. A security vulnerability exists in ARD GEC en Ligne that stems from an insecure direct object reference to the feuid parameter in the payment history API endpoint, which could lead to unauthorized access to another user's payment history...