Zyosoft School App Insecure Direct Object Reference Vulnerability

A vulnerability allowing authenticated remote attackers to exploit Insecure Direct Object Reference (IDOR) has been identified in the School App developed by Zyosoft. This vulnerability is present in the Android version prior to 1.1.62 and the iOS version prior to 2.7.2. The issue allows attackers to modify specific parameters to access and alter data belonging to other users.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of user data.

Remediation

Users are advised to update the School App on Android to version 1.1.62 or later, and on iOS to version 2.7.2 or later.