PT-2025-47367 · Kishan0725 · Hospital Management System

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-63513

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions kishan0725 Hospital Management System version 4

Description The software contains an Insecure Direct Object Reference (IDOR) issue within the appointment cancellation functionality. This allows potential unauthorized access and manipulation of data. The issue involves direct access to objects without proper authorization checks.

Recommendations Implement robust authorization checks within the appointment cancellation functionality to ensure users can only cancel their own appointments.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-63513

Affected Products

Hospital Management System

References · 7

• 🔥 https://github.com/kishan0725/Hospital-Management-System/issues/55 · Exploit
• 🔥 https://github.com/NicatAliyevh/Zero-Days/blob/main/Hospital_Management_System_IDOR.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63513 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63513 · Vendor Advisory
• https://twitter.com/CVEnew/status/1991066228706976078 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1990861691962220889 · Twitter Post
• https://t.me/CVEtracker/37650 · Telegram Post