The vulnerability identified as CVE-2025-0875 in PROLIZ Computer Software Hardware Service Trade Ltd. Co.'s OBS (Student Affairs Information System) is an authorization bypass through user-controlled key parameter injection. This issue allows an attacker with low privileges to bypass authorization mechanisms by manipulating input parameters. It affects all versions prior to v26.0328. The CVSS 3.1 base score is 6.5, reflecting a network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No patch or official fix has been documented at this time.

Successful exploitation could allow an attacker with limited privileges to bypass authorization controls and access sensitive information, resulting in a high confidentiality impact. There is no impact on integrity or availability reported. The vulnerability does not require user interaction and can be exploited remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system to trusted users only and monitor for unusual access patterns related to authorization bypass attempts. Avoid exposing the affected system directly to untrusted networks.