CVE-2025-25953

CVSS 6.5 MEDIUMEPSS 0.4%CWE-862

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Mar 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Affected products

n/a · n/a

References

https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953