tsuretettee/cve-2025-65594

tsuretettee/cve-2025-65594

GitLabGitLab
GitLabgitlab.com
Releases0
My writeup on the incorrect access control vulnerability in OpenSIS.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-65594↗
8.1 HIGH—

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.