CVE-2025-55886

n/a / n/a PUBLISHED

Description (CNA)

An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://services.ard.fr
https://github.com/0xZeroSec/CVE-2025-55886

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.