CVE-2025-25948

CVE-2025-25948 affects Serosoft Solutions Pvt Ltd Academia Student Information System EagleR v1.0.118. The vulnerability is due to incorrect access control in the REST endpoint /rest/staffResource/create, enabling an attacker to create and modify user accounts, including an Administrator account....