CVE-2025-65594

High · 8.1

CVSS

8.1

EPSS

0.3%

Published

Dec 9, 2025

CISA due date

—

The record

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations relating to the data of other users.

Affected packages

Ecosystem	Package	Introduced	Fixed