> For the complete documentation index, see [llms.txt](https://docs.offsecguy.com/cve/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.offsecguy.com/cve/cornerstone/csod.md).

# Cornerstone OnDemand LMS v24.2.5.32 | Insecure Direct Object Reference (IDOR) Disclosures

<figure><img src="/files/v63Xp5MJRs59gDcs0q7k" alt=""><figcaption><p>Cornerstone OnDemand LMS v24.2.5.32 and prior versions</p></figcaption></figure>

## Summary of Findings

* [Insecure Direct Object Reference (IDOR) ](/cve/cornerstone/vulnerabilities/idor1.md)in <mark style="color:$danger;">LaunchVideo.aspx</mark>
  * CVE-2025-60929
* [Insecure Direct Object Reference (IDOR)](/cve/cornerstone/vulnerabilities/idor2.md) in <mark style="color:$danger;">Terminate.aspx</mark>
  * CVE-2025-60930

### Timeline

* Reported to Vendor: Oct 23rd, 2024
* Patched: TBD
* Published: TBD