Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-0875 EUVD-2025-30779GHSA-r4g7-m54c-6f4w

IDOR in Proliz Software's OBS

Published Sep 22, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection.

This issue affects OBS (Student Affairs Information System): before v26.0328.

Affected products

VendorProductAffectedFixed
PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) < v26.0328 v26.0328

References