CVE-2025-22931 in openSIS

Riassunto

di MITRE • 03/04/2025

An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: MITRE
• Prenotare: 09/01/2025
• Divulgazione: 03/04/2025
• Moderazione: accettato
• Voce: VDB-303175
• CPE: pronto
• CWE: CWE-99 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00447
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-22931
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-22931
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-22931/