romitou vulnerabilities

Products

• github.com/romitou/insatutorat 1

Latest romitou CVEs

Newest publication first

1. GHSA-xfx2-prg5-jq3g INSATutorat has an authorization bypass vulnerability in its /api/admin/* endpoints

   Published 2026-03-01

   High·CVSS 8.7

   Impact An authorization bypass vulnerability was discovered in the administration pages of the tutoring application. When a standard user (logged in but without administrator privileges) attempts to access a resource under /api/admin/, the system detects the error but does not bl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.