CVE-2025-65676

概要

参考情報

• Rivek619/CVE-2025-65676 · Exploit
• classroomio/classroomio · Product

classroomio のその他の脆弱性

• CVE-2025-67298高 8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
• CVE-2025-65670中 4.3An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating…
• CVE-2025-65675中 5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft…
• CVE-2025-65672高 7.5Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.
• CVE-2025-65669緊急 9.1An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization o…