CVE-2025-56392
An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products