Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-0875: Unauthorized Access to OBS Student Affairs System

CVE-2025-0875 · published 1 year ago

Summary

A weakness in the OBS Student Affairs System allows an attacker to bypass security checks and access areas they shouldn't. This affects all versions of the system prior to v26.0328. Users should update to the latest version to prevent unauthorized access.

Original advisory text

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection. This...

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection.

This issue affects OBS (Student Affairs Information System): before v26.0328.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-639Authorization Bypass Through User-Controlled Key

Timeline

Published22 Sep 2025

Updated4 Nov 2026

First seen6 Mar 2026

Sources

CVE-2025-0875 · NVD

Track software like this

Free during beta