CVE-2025-65672

Description

References

• Rivek619/CVE-2025-65672 · Exploit
• classroomio/classroomio · Product

classroomio의 다른 취약점

• CVE-2025-67298높음 8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
• CVE-2025-65670보통 4.3An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating…
• CVE-2025-65676보통 5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft…
• CVE-2025-65675보통 5.4Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft…
• CVE-2025-65669심각 9.1An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization o…