CVE-2025-65672: High severity Classroomio classroomio vulnerability
Published Nov 26, 2025
·Updated
Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.
Affected Software
2 affected components
Classroomio classroomio
Classroomio classroomio=0.1.13
Event History
Nov 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65672?
CVE-2025-65672 is classified with a high severity due to its potential for unauthorized access to sensitive course settings.
2
How do I fix CVE-2025-65672?
To fix CVE-2025-65672, implement access controls and validation checks to prevent unauthorized object references.
3
What type of vulnerability is CVE-2025-65672?
CVE-2025-65672 is an Insecure Direct Object Reference (IDOR) vulnerability.
4
Who is affected by CVE-2025-65672?
CVE-2025-65672 affects users of classroomio version 0.1.13.
5
What are the risks associated with CVE-2025-65672?
The risks include unauthorized sharing and inviting access to confidential course settings, leading to potential data breaches.