TI-2025-37938 CVE-2025-61148 · GHSA-fp99-3rpw-vrxxAn Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1…Priority LOW 29An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' paramet…CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0037 · Published 2025-12-04 · No fix listed CWE-639