CVE-2025-61876

Insecure Direct Object Reference IDOR in /tenants/id API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients via modification of the tenant ID in the request URL...

CVE-2025-61876

The Inforcer Platform (version 2.0.153 ) is affected by an Insecure Direct Object Reference (IDOR) vulnerability in the /tenants/{id} API endpoint. This flaw allows an authenticated user with low privileges to enumerate and access sensitive tenant information belonging to other clients by modifyi...