CVE-2025-25777 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in…
High CVSS: 8.0

CVE-2025-25777

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.
Vendor
Codeastro
Product
Bus Ticket Booking System
CWE
CWE-639
Yayın Tarihi
2025-04-24 21:15:23
Güncelleme
2025-05-28 13:41:40
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-639 Bus Ticket Booking System HIGH Codeastro 2025

Referanslar

https://codeastro.com/bus-ticket-booking-system-in-php-codeigniter-with-source-code/ https://github.com/arunmodi/Vulnerability-Research/tree/main/CVE-2025-25777