CVE-2025-40650

Insecure Direct Object Reference (IDOR) in Clickedu PUBLISHED

Description (CNA)

Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards.

Affected (CNA)

Vendor / product	Versions
Clickedu / Clickedu	affected all versions

CWE

CWE-639

References

https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-reference-idor-clickedu

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.