CVE-2025-32367: Oz Forensics Face Recognition Application

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.

Affected products

• Oz Forensics Face Recognition Application: before 4.0.8 late 2023 (fixed in 4.0.8 late 2023)

Published 2025-04-11. Last modified 2026-06-17.