CVE-2025-25777
April 24, 2025, 9:15 p.m.
None
No Score
Description
Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Codeastro |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| a | codeastro | bus_ticket_booking_system | 1.0 | / | / | / | / | / | / | / |
Tags
Timeline
Published: April 24, 2025, 9:15 p.m.
Last Modified: April 24, 2025, 9:15 p.m.
Last Modified: April 24, 2025, 9:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.