CVE-2025-1031 IDOR in Utarit Informatics' SoliClub
Attackers can bypass authorization controls to access or modify other users' data in SoliClub by manipulating user-controlled keys.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1031?
CVE-2025-1031 is a high-severity missing authorization vulnerability in Utarit Informatics Services Inc. SoliClub, published on 18 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc. SoliClub allows Functionality Misuse.
This issue affects SoliClub: from 5.2.4 before 5.3.7.
Weakness: CWE-639
Which versions are affected by CVE-2025-1031?
It affects 1 product.
Products include Utarit Soliclub.
How do I fix CVE-2025-1031?
No fix has been published for CVE-2025-1031 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-1031 being exploited?
There is no known exploitation of CVE-2025-1031 in the wild and no public exploit code.
Other vulnerabilities in Utarit Informatics Services Inc. SoliClub
- CVE-2024-3305 IDOR in Utarit Information's SoliClub
- CVE-2024-3306 IDOR in Utarit Information's SoliClub
- CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub
- CVE-2025-1030 Sensitive Data Exposure in Utarit Informatics' SoliClub
- CVE-2025-7358 Use of Hard-coded Credentials in Utarit Informatics' SoliClub
Sources
Also known as GHSA-h9jv-6gv7-xp9q.