CVE-2025-25953

MEDIUM

Serosoft Academia Student Information System - Missing Authorization

Title source: rule
STIX 2.1

Description

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

References (3)

Core 3

Scores

CVSS v3 6.5
EPSS 0.0005
EPSS Percentile 16.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-862
Status published
Products (1)
serosoft/academia_student_information_system eagler-1.0.118
Published Mar 03, 2025
Tracked Since Feb 18, 2026