CVE-2025-65670

n/a / n/a PUBLISHED

Description (CNA)

An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/classroomio/classroomio
https://github.com/Rivek619/CVE-2025-65670

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.