CVE-2025-29504

HIGH

Huang-yk Student-manage - Incorrect Default Permissions

Title source: rule

Description

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification.

Exploits (1)

References (1)

Scores

CVSS v3 7.8
EPSS 0.0006
EPSS Percentile 19.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-276
Status published

Affected Products (1)

huang-yk/student-manage

Timeline

Published Apr 03, 2025
Tracked Since Feb 18, 2026