How to fix CVE-2025-25777?

Within 7 days: Identify all affected systems running Codeastro Bus Ticket Booking System and apply vendor patches promptly. Monitor vendor channels for patch availability.

Is Bus Ticket Booking System affected by CVE-2025-25777?

Organizations using Codeastro Bus Ticket Booking System face notable risk from CVE-2025-25777, a IDOR vulnerability rated CVSS 8.0. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems.

CVE-2025-25777

HIGH

2025-04-24 [email protected]

Authentication Bypass Bus Ticket Booking System

8.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:38 vuln.today

PoC Detected

May 28, 2025 - 13:41 vuln.today

Public exploit code

CVE Published

Apr 24, 2025 - 21:15 nvd

HIGH 8.0

DescriptionNVD

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.

AnalysisAI

Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-639. Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks. Affected products include: Codeastro Bus Ticket Booking System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-25777 vulnerability details – vuln.today

Back