classroomio kayıtları
classroomio üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-290 Authentication Bypass by Spoofing1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-65669Kavram kanıtı | An issue was discovered in classroomio 0.1.13.classroomio · classroomio · CWE-862 | Kritik9,1 | — | %0,5 | 26 Kas 2025 |
32İzleyin | CVE-2025-67298İstismar yok | An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profileclassroomio · classroomio · CWE-290 | Yüksek8,1 | — | %0,2 | 11 Mar 2026 |
30İzleyin | CVE-2025-65672Kavram kanıtı | Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.classroomio · classroomio · CWE-639 | Yüksek7,5 | — | %0,4 | 26 Kas 2025 |
21İzleyin | CVE-2025-65675Kavram kanıtı | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craftclassroomio · classroomio · CWE-79 | Orta5,4 | — | %0,2 | 26 Kas 2025 |
21İzleyin | CVE-2025-65676Kavram kanıtı | Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craftclassroomio · classroomio · CWE-79 | Orta5,4 | — | %0,2 | 26 Kas 2025 |
17İzleyin | CVE-2025-65670Kavram kanıtı | An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulatingclassroomio · classroomio · CWE-639 | Orta4,3 | — | %0,2 | 26 Kas 2025 |
- CVE-2025-6566936İzleyin
An issue was discovered in classroomio 0.1.13.
KritikCVSS 9,1Kavram kanıtıEPSS %0classroomio · classroomio26 Kas 2025
- CVE-2025-6729832İzleyin
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
YüksekCVSS 8,1İstismar yokEPSS %0classroomio · classroomio11 Mar 2026
- CVE-2025-6567230İzleyin
Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.
YüksekCVSS 7,5Kavram kanıtıEPSS %0classroomio · classroomio26 Kas 2025
- CVE-2025-6567521İzleyin
Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft
OrtaCVSS 5,4Kavram kanıtıEPSS %0classroomio · classroomio26 Kas 2025
- CVE-2025-6567621İzleyin
Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via craft
OrtaCVSS 5,4Kavram kanıtıEPSS %0classroomio · classroomio26 Kas 2025
- CVE-2025-6567017İzleyin
An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating
OrtaCVSS 4,3Kavram kanıtıEPSS %0classroomio · classroomio26 Kas 2025