PT-2025-38697 · Proliz Computer Software Hardware Service Trade · Obs

Published 2025-09-22 · Updated 2026-02-11 · CVE-2025-0875

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) versions prior to v26.0328

Description An authorization bypass exists due to a user-controlled key issue in OBS (Student Affairs Information System). This allows for parameter injection. The issue impacts the OBS (Student Affairs Information System) application.

Recommendations Update to version 26.0328 or later.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-0875

Affected Products

Obs

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0875 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0282 · Note
• https://t.me/cveNotify/151665 · Telegram Post
• https://twitter.com/CVEnew/status/1970047376359326158 · Twitter Post
• https://t.me/CVEtracker/33046 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0282 · Note