CVE-2025-46203

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/id endpoint...

CVE-2025-46203

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/id endpoint...

CVE-2025-46203

The school management software Unifiedtransform v2.0 is vulnerable to Incorrect Access Control (CWE-266) within its Total Access Control Mechanism . Specifically, the editStudents() method in the UserController at the GET /students/edit/{id} endpoint fails to properly enforce permissions, allowin...

CVE-2025-46203

creationtimestamp| type| source ---|---|--- 2025-05-29 15:37:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/38553...