Description
Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id.
Medium · 6.5
CVE-2025-59686
EUVD-2025-32727GHSA-hrcp-jqfc-jx4p
Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id.
Published Oct 1, 2025 · Updated Oct 28, 2025 · Assigned by mitre