CVE-2025-25953

Katalog CVE

CVSS 6.5 · Medium EPSS 0,39%

Kerentanan Missing Authorization pada serosoft academia student information system. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

Rincian

Terbit di NVD

3 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953 advisory pihak ketiga
• https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640 broken link
• https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953