CVE-2025-0875

MEDIUM 6.5

IDOR in Proliz Software's OBS

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

4th

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Parameter Injection. This issue affects OBS (Student Affairs Information System): before v26.0328.

CWE	CWE-639
Vendor	proliz computer software hardware service trade ltd. co.
Product	obs (student affairs information system)
Published	Sep 22, 2025
Last Updated	Jun 6, 2026

Stay Ahead of the Next One

Get instant alerts for proliz computer software hardware service trade ltd. co. obs (student affairs information system)

Be the first to know when new medium vulnerabilities affecting proliz computer software hardware service trade ltd. co. obs (student affairs information system) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

PROLIZ Computer Software Hardware Service Trade Ltd. Co. / OBS (Student Affairs Information System)

0 < v26.0328

References

NVD ↗ CVE.org ↗ EPSS Data ↗

usom.gov.tr: https://www.usom.gov.tr/bildirim/tr-25-0282 siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0282

Credits

Mustafa Anıl YILDIRIM