CVE-2025-67298 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
High CVSS: 8.1

CVE-2025-67298

An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
Vendor
Classroomio
Product
Classroomio
CWE
CWE-290
Yayın Tarihi
2026-03-11 15:16:21
Güncelleme
2026-04-07 01:19:45
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-290 Classroomio HIGH Classroomio 2026

Referanslar

https://gist.github.com/prashunbaral/70c4f6f9d9ff8b82295623073eb41f3a https://github.com/classroomio/classroomio/releases/tag/v0.2.6