6 matches found
CVE-2025-25617
CVE-2025-25617 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to create syllabus entries — a role intended only for administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...
EUVD-2025-7676
Malicious code in bioql PyPI...
CVE-2025-25617
Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...
CVE-2025-25617
Unifiedtransform v2.0 is susceptible to an Incorrect Access Control vulnerability, which enables Privilege Escalation . Specifically, users with Teacher roles can access the /syllabus/create endpoint to create syllabus entries, a functionality intended exclusively for administrators . This vulner...
