Authorization Bypass Vulnerability in OBS Student Affairs Information System by PROLIZ

CVE-2025-0875

What is CVE-2025-0875?

The OBS (Student Affairs Information System) from PROLIZ contains a significant vulnerability that allows an authorization bypass through user-controlled keys. This flaw enables attackers to perform parameter injection, potentially leading to unauthorized access to sensitive information within the system. Affected versions are prior to v26.0328, and it is crucial for organizations using this software to implement necessary security measures to mitigate the risks associated with this vulnerability.

References