CVE Intelligence

Vulnerabilidades do Edupluscampus Edupluscampus

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Edupluscampus Edupluscampus: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:edupluscampus:edupluscampus

CVE-2025-61148 Média · 6.5 CWE-639 04/12/2025
Authorization Bypass Through User-Controlled Key (IDOR) em Edupluscampus
An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint.