CVE-2025-25620

Description

References

• armaansidana2003/CVE-2025-25620 · Third Party Advisory
• changeweb/Unifiedtransform · Product

unifiedtransform 的其他漏洞

• CVE-2025-46204中危 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
• CVE-2025-46203中危 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
• CVE-2025-25621中危 4.3Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected e…
• CVE-2025-25618低危 3.3Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teache…
• CVE-2025-25614高危 8.8Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow …