CVE-2025-25616

概要

参考情報

• armaansidana2003/CVE-2025-25616 · Third Party Advisory
• changeweb/Unifiedtransform · Product

unifiedtransform のその他の脆弱性

• CVE-2025-46204中 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
• CVE-2025-46203中 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
• CVE-2025-25621中 4.3Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected e…
• CVE-2025-25618低 3.3Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teache…
• CVE-2025-25620中 5.4Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.