CVE-2024-53573

Critical CVSS: 9.8

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/{id}.

Vendor

Changeweb

Product

Unifiedtransform

CWE

CWE-284

Yayın Tarihi

2025-02-26 22:15:14

Güncelleme

2025-04-07 18:44:05

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-284 Unifiedtransform CRITICAL Changeweb 2025

Referanslar

https://drive.google.com/file/d/14Or6QIpOeLEqdFm1mwxdE_NNCOwMmcFc/view https://www.getastra.com/blog/vulnerability/improper-access-control-in-school-management-system-unifiedtransform/ https://drive.google.com/file/d/14Or6QIpOeLEqdFm1mwxdE_NNCOwMmcFc/view

Benzer Kayıtlar

Medium

CVE-2025-46203

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

Medium

CVE-2025-46204

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

Low

CVE-2025-25618

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and R…

Medium

CVE-2025-25621

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teach…

High

CVE-2025-25614

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the pers…

Medium

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.