- Description
- The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
- Source
- cve@mitre.org
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.6
- Impact score
- 4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- Severity
- HIGH
- cve@mitre.org
- CWE-425
- Hype score
- Not currently trending
🚨 CVE-2025-32367 🔴 HIGH (8.6) 🏢 Oz Forensics - face recognition application 🏗️ 0 🔗 https://t.co/NkxwW6Vkii 🔗 https://t.co/vV4TxdPbFI #CyberCron #VulnAlert #InfoSec https://t.co/2NPP4PpM4o
@cybercronai
13 Apr 2025
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-32367 The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8… https://t.co/9do3AMZgue
@CVEnew
11 Apr 2025
647 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-32367: HIGH] Oz Forensics' face recognition app pre-4.0.8 has a security flaw enabling PII retrieval through an insecure reference. Important: version 4.0.8 denotes both unpatched and patched versions.#cybersecurity,#vulnerability https://t.co/2vqAc5VMRG https://t.co/0G
@CveFindCom
11 Apr 2025
5 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes