CVE-2024-8261

Published: Mar 3, 2025Modified: Jun 2, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927.

Affected (1)

Products: Prolizyazilim: Student Affairs Information System

Prolizyazilim

1 product

Student Affairs Information System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Prolizyazilim Student Affairs Information System	Before 24.0927

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0049

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-25-0049

Source: iletisim@usom.gov.tr

Third Party Advisory

Timeline

No history available yet.