CVE-2025-11080 zhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectStudentExamInfoList of the file src/main/java/com/education/api/controller/student/ExamInfoController.java. Such manipulation of the argument subjectId leads ...

CVE-2025-11080

CVE-2025-11080 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in ExamInfoController.java, in the selectStudentExamInfoList function, where manipulation of the subjectId parameter leads to improper authorization. Itمكن be exploited remotely and the exploit has been p...