Lucene search
+L

3 matches found

NVD
NVD
•added 2026/02/09 9:15 p.m.•15 views

CVE-2026-25810

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization ownership checks...

9.1CVSS0.00505EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/09 8:48 p.m.•49 views

CVE-2026-25810 PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization ownership checks...

5.3CVSS0.00505EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/09 8:48 p.m.•12 views

CVE-2026-25810 PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/student.submission.routes.ts verify authentication but fails to enforce object-level authorization ownership checks...

5.3CVSS5.5AI score
SaveExploits0References3
Rows per page
Query Builder