Filtered by vendor Irohasoft Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-48497 1 Irohasoft 1 Iroha Board 2025-09-30 N/A
Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL while being logged in to the affected product, arbitrary learning histories may be registered.
CVE-2025-41404 1 Irohasoft 1 Iroha Board 2025-09-30 N/A
Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.