CVE-2025-27583 in Academia Student Information System EagleR

Sumário

de MITRE • 03/03/2025

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: MITRE
• Reservar: 03/03/2025
• Divulgação: 03/03/2025
• Moderação: aceite
• Entrada: VDB-298133
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00327
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-27583
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-27583
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-27583/