CVE-2025-25615

creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7002 2025-03-10 15:40:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7j5upa2f 2025-03-10 16:31:59+00:00| seen|...

CVE-2025-25615

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections...

CVE-2025-25615

Unifiedtransform 2.0 is vulnerable to an Incorrect Access Control flaw that allows users with teacher-level privileges to view attendance lists for all class sections. The root cause is a failure to restrict access to the attendance data, which should be limited to administrators. An attacker can...