CVE-2025-10719: WisdomGarden｜Tronclass - Insecure Direct Object Reference
Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10719?
CVE-2025-10719 is categorized as a high severity vulnerability due to its potential impact on user data confidentiality.
How do I fix CVE-2025-10719?
To mitigate CVE-2025-10719, implement proper access controls and input validation to prevent unauthorized access to files.
What are the risks associated with CVE-2025-10719?
The risks of CVE-2025-10719 include unauthorized data exposure and potential manipulation of sensitive user files.
Who is affected by CVE-2025-10719?
Users of WisdomGarden's Tronclass platform are affected by CVE-2025-10719 due to its insecure direct object reference flaw.
Can CVE-2025-10719 be exploited remotely?
Yes, CVE-2025-10719 can be exploited remotely by attackers with regular privileges who manipulate specific parameters.