CVE-2025-0875

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection. This issue affects OBS (Student Affairs Information System): before v26.0328.

• CWE-639

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0282
• https://www.usom.gov.tr/bildirim/tr-25-0282

Published

Sep 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0869A vulnerability was found in Cianet ONU GW24AC up to 2025012…5.3
• CVE-2025-0870A vulnerability was found in Axiomatic Bento4 up to 1.6.0-64…5.9
• CVE-2025-0871A vulnerability classified as problematic has been found in …5.3
• CVE-2025-0872A vulnerability classified as critical has been found in its…9.8
• CVE-2025-0873A vulnerability classified as critical was found in itsource…9.8
• CVE-2025-0874A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-0876Improper Neutralization of Input During Web Page Generation …4.1
• CVE-2025-0877Improper Neutralization of Input During Web Page Generation …4.7
• CVE-2025-0878Improper Neutralization of Input During Web Page Generation …4.7
• CVE-2025-0879Improper Neutralization of Input During Web Page Generation …4.7
• CVE-2025-0880A vulnerability was found in Codezips Gym Management System …9.8
• CVE-2025-0881A vulnerability was found in Codezips Gym Management System …9.8