NuytsTech Security

CVE-2025-56392

by ·

An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.

More information : https://github.com/Zelilac/vulnerability-research/tree/main/CVE-2025-56392

Tags: