CVE-2025-25948

Critical CVSS: 9.1

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

Vendor

Academiaerp

Product

Student Information System

CWE

CWE-284

Yayın Tarihi

2025-03-03 01:15:11

Güncelleme

2026-01-29 02:05:39

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-284 Student Information System CRITICAL Academiaerp 2025

Referanslar

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25948 https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25948