CVE-2025-10072

Katalog CVE

CVSS 6.3 · Medium EPSS 0,33%

Kerentanan Incorrect Privilege Assignment pada portabilis i-educar. Skor CVSS 3.1 6.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /matricula/[ID_STUDENT]/enturmar/. Performing a manipulation results in improper access controls. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.11.0 is capable of addressing this issue. It is suggested to upgrade the affected component. The vendor confirms: "The reported attack vector was tested against the corrected code, and the previously described improper access control behavior could no longer be reproduced."

Rincian

Terbit di NVD

7 September 2025

Terakhir diubah

18 September 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-284: Improper Access Control

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 23,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10072.md exploit · advisory pihak ketiga
• https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20%20in%20.matricula.(ID_STU... broken link
• https://github.com/portabilis/i-educar/tree/2.11.0
• https://vuldb.com/cve/CVE-2025-10072
• https://vuldb.com/submit/644135
• https://vuldb.com/vuln/323020
• https://vuldb.com/vuln/323020/cti