9.1

CVE-2025-25948

Exploit
Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Academiaerp ≫ Student Information System Versioneagler-1.0.118
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.58% 0.93
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637
Broken Link
https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25948
Broken Link
https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25948
Third Party Advisory
Exploit
Mitigation