CVE-2025-63513: Medium severity kishan0725 Hospital Management System vulnerability
Published Nov 18, 2025
·Updated
kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment cancellation functionality.
Affected Software
2 affected components
kishan0725 Hospital Management System
kishan0725 Hospital Management System=4.0
Event History
Nov 18, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63513?
CVE-2025-63513 is considered a critical vulnerability due to the potential for unauthorized access to appointment cancellation functionality.
2
How do I fix CVE-2025-63513?
To fix CVE-2025-63513, implement access controls to ensure that users can only cancel their own appointments.
3
What does CVE-2025-63513 allow an attacker to do?
CVE-2025-63513 allows an attacker to exploit the appointment cancellation functionality, leading to unauthorized cancellations of appointments.
4
Which version of the Hospital Management System is affected by CVE-2025-63513?
CVE-2025-63513 affects version 4.0 of the kishan0725 Hospital Management System.
5
What type of vulnerability is CVE-2025-63513?
CVE-2025-63513 is classified as an Insecure Direct Object Reference (IDOR) vulnerability.