Security Advisory

CVE-2025-22931

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-03 00:00:00

Last updated 2025-04-21 18:26:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members.

← Browse all CVEs View on cve.org ↗