CVE-2025-13808

A flaw has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this vulnerability is the function update of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/UserController.java of the component User Profile Handler. This manipulation of the argument ID causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-266
• CWE-285

• https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.mdExploit, Third Party Advisory
• https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-conceptExploit
• https://vuldb.com/?ctiid.333818Permissions Required, VDB Entry
• https://vuldb.com/?id.333818Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.692068Third Party Advisory, VDB Entry
• https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.mdExploit, Third Party Advisory
• https://github.com/Xzzz111/exps/blob/main/archives/orion-ops-privilege-escalation-1/report.md#proof-of-conceptExploit

Published

Dec 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13802A vulnerability was determined in jairiidriss RestaurantWebs…4.3
• CVE-2025-13803A vulnerability was identified in MediaCrush 1.0.0/1.0.1. Th…7.3
• CVE-2025-13804A security flaw has been discovered in nutzam NutzBoot up to…4.3
• CVE-2025-13805A weakness has been identified in nutzam NutzBoot up to 2.6.…3.7
• CVE-2025-13806A security vulnerability has been detected in nutzam NutzBoo…9.8
• CVE-2025-13807A vulnerability was detected in orionsec orion-ops up to 592…4.3
• CVE-2025-13809A vulnerability has been found in orionsec orion-ops up to 5…6.5
• CVE-2025-1381A vulnerability was found in code-projects Real Estate Prope…7.5
• CVE-2025-13810A vulnerability was found in jsnjfz WebStack-Guns 1.0. This …7.5
• CVE-2025-13811A vulnerability was determined in jsnjfz WebStack-Guns 1.0. …7.2
• CVE-2025-13812The GamiPress – Gamification plugin to reward points, achiev…4.3
• CVE-2025-13813A vulnerability was identified in moxi159753 Mogu Blog v2 up…8.1