CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7000 2025-03-10 15:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jbtiz2j 2025-03-10 16:31:53+00:00| seen|...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?examruleid=1...

CVE-2025-25616

The open-source school management software Unifiedtransform version 2.0 is vulnerable to Incorrect Access Control (CWE-284). This flaw allows students to bypass authorization to modify exam rules via the /exams/edit-rule?exam_rule_id=1 endpoint. By manipulating the exam_rule_id parameter, an atta...