1. Home
  2. CVE Database
  3. CVE-2025-56254
MEDIUM · 4.3

CVE-2025-56254

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the UR...

Vulnerability Description

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
PhpgurukulEmployee Leave Management System2.1

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2025-56254?

CVE-2025-56254 is a vulnerability with a CVSS score of 4.3 (MEDIUM). PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the UR...

How severe is CVE-2025-56254?

CVE-2025-56254 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-56254?

Check the references section above for vendor advisories and patch information. Affected products include: Phpgurukul Employee Leave Management System.