high7.5
CVE-2025-41098
Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enqu…
Impact
Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enquiry web service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boldworkplanner | Bold Workplanner | before 2.5.25 |