CVE-2025-25953

CVSS 6.5 MEDIUMEPSS 0.4%CWE-862

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

03 mar 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Productos afectados

n/a · n/a

Referencias

https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953