Untriaged
Permalink
CVE-2025-32223
6.5 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): NONE
- Availability impact (A): NONE
WordPress Tutor LMS plugin <= 3.9.4 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through 3.9.4.
References
Affected products
tutor
- =<3.9.4
Matching in nixpkgs
pkgs.typstPackages.tutor
Utilities to create exams
pkgs.typstPackages.tutor_0_3_0
Utilities to create exams
pkgs.typstPackages.tutor_0_4_0
Utilities to create exams
pkgs.typstPackages.tutor_0_6_1
Utilities to create exams
pkgs.typstPackages.tutor_0_7_0
Utilities to create exams
pkgs.typstPackages.tutor_0_8_0
Utilities to create exams
pkgs.haskellPackages.egison-tutorial
A tutorial program for the Egison programming language
pkgs.perlPackages.TaskCatalystTutorial
Everything you need to follow the Catalyst Tutorial
pkgs.haskellPackages.timeless-tutorials
Initial project template from stack
pkgs.perl5Packages.TaskCatalystTutorial
Everything you need to follow the Catalyst Tutorial
pkgs.perl538Packages.TaskCatalystTutorial
Everything you need to follow the Catalyst Tutorial
pkgs.perl540Packages.TaskCatalystTutorial
Everything you need to follow the Catalyst Tutorial
Package maintainers
-
@cherrypiejam Gongqi Huang
-
@RossSmyth Ross Smyth