https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T00:57:32.498615+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-60982 fkie_cve-2025-60982 2026-10-07T00:57:32.511187+00:00

IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object identifiers in API requests. Attackers can exploit this flaw to view or modify sensitive records without proper authorization.

 https://vulnerability.circl.lu/vuln/ghsa-q3q4-2x44-pxxp GHSA-q3q4-2x44-pxxp 2026-10-07T00:57:32.511380+00:00

IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object identifiers in API requests. Attackers can exploit this flaw to view or modify sensitive records without proper authorization.