CVE-2024-45058

🗓️ 28 Aug 2024 20:17:30Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

i-Educar school management software allows unauthorized user privilege escalation via settings

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for Improper Input Validation in Portabilis I-Educar	30 Aug 202418:44	–	githubexploit
Circl	CVE-2024-45058	29 Aug 202400:19	–	circl
CNNVD	Portábilis i-Educar 安全漏洞	28 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-45058 Privilege escalation in i-Educar	28 Aug 202420:17	–	cvelist
EUVD	EUVD-2024-41289	3 Oct 202520:07	–	euvd
NVD	CVE-2024-45058	28 Aug 202421:15	–	nvd
OSV	CVE-2024-45058 Privilege escalation in i-Educar	28 Aug 202420:17	–	osv
Positive Technologies	PT-2024-31409 · I-Educar · I-Educar	28 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-45058	5 Feb 202503:33	–	redhatcve
Vulnrichment	CVE-2024-45058 Privilege escalation in i-Educar	28 Aug 202420:17	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

portabilis i-educarRange≤2.9

[
  {
    "vendor": "portabilis",
    "product": "i-educar",
    "versions": [
      {
        "version": "< 2.9",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/portabilis/i-educar/commit/c25910cdf11ab50e50162a49dd44bef544422b6e
github	www.github.com/portabilis/i-educar/security/advisories/GHSA-53vj-fq8x-2mvg

Parameter	Position	Path	Description	CWE
nivel_usuario_	request body	/intranet/educar_usuario_cad.php	Broken access control; allows a viewer to elevate privileges by changing their user type via a crafted POST to educar_usuario_cad.php.	CWE-269, CWE-862

13 Sep 2024 20:06Current

8High risk

Vulners AI Score8

CVSS 3.18.1

CVSS 38.1

EPSS0.24297

SSVC

i-educar school management software unauthorized privilege escalation