← Volver a CVEs
CVE-2025-25618
LOW3.3
Descripcion
Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers.
Detalles CVE
Puntuacion CVSS v3.13.3
SeveridadLOW
Vector CVSSCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
Vector de ataqueNETWORK
ComplejidadHIGH
Privilegios requeridosHIGH
Interaccion usuarioNONE
Publicado3/17/2025
Ultima modificacion6/24/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
changeweb:unifiedtransform
Debilidades (CWE)
CWE-284
Referencias
https://github.com/armaansidana2003/CVE-2025-25618(cve@mitre.org)
https://github.com/changeweb/Unifiedtransform(cve@mitre.org)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.