CVEvulnerability

CVE-2025-25777

8.0 HIGH Published 2025-04-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.0 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-639

Description

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.

Affected configurations

• codeastro bus ticket booking system 1.0

Related

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References