Description
An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.
High · 7.5
CVE-2025-22931
EUVD-2025-9612GHSA-mw97-j6p7-xp5g
An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attacke…
Published Apr 3, 2025 · Updated Apr 21, 2025 · Assigned by mitre