Description
An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.
High · 8.1
CVE-2025-56392
EUVD-2025-31773GHSA-pf72-gm84-6r86
An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate …
Published Sep 30, 2025 · Updated Oct 2, 2025 · Assigned by mitre