Description
OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.
High · 8.1
CVE-2025-65594
EUVD-2025-202199GHSA-8g75-9w8p-j9q2
OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform…
Published Dec 9, 2025 · Updated Jul 5, 2026 · Assigned by mitre