high8.6
CVE-2025-32367
The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference.
Impact
The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oz Forensics | Oz Forensics Face Recognition Application | before 4.0.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.