Description
Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attackers with low-level privileges to dump user records and access sensitive information.
Medium · 6.5
CVE-2025-65238
EUVD-2025-199726GHSA-q3m5-g9pg-7793
Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attack…
Published Nov 26, 2025 · Updated Dec 3, 2025 · Assigned by mitre