CVE-2025-55886

An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization...

CVE-2025-55886

An Insecure Direct Object Reference (IDOR) vulnerability exists in ARD GEC en Ligne , specifically within the fe_uid parameter of the payment history API endpoint. This flaw allows an authenticated attacker to manipulate the parameter to gain unauthorized access to the payment history of other us...

CVE-2025-55886: Protection Mechanism Failure

An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization...