CVE-2025-25950 in Academia Student Information System EagleR

Sumário

de MITRE • 03/03/2025

Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: MITRE
• Reservar: 07/02/2025
• Divulgação: 03/03/2025
• Moderação: aceite
• Entrada: VDB-298131
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00336
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-25950
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-25950
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-25950/