CVE-2025-25953

CVSS 6.5 MEDIUMEPSS 0.4%CWE-862

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

03 mar 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Produtos afetados

n/a · n/a

Referências

https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953