VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 16, 2025· Updated Oct 16, 2025

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito

CVE-2025-41020

Description

Insecure direct object reference (IDOR) vulnerability in Sergestec's Exito v8.0. This vulnerability allows an attacker to access data belonging to other customers through the 'id' parameter in '/admin/ticket_a4.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Sergestec/Exitollm-fuzzy2 versions
    =8.0+ 1 more
    • (no CPE)range: =8.0
    • (no CPE)range: 8.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.