CVE-2025-9760

Опубликовано: 01 сент. 2025

Источник: nvd

CVSS3: 6.3

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Ссылки

https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Function%20Level%20Authorization%20on%20%60matricula%60%20API%20allows%20deletion%20of%20%E2%80%9Cabandono%E2%80%9D%20status.md#proof-of-concept-poc
Broken Link
https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9760.md
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.322061
Permissions Required
VDB Entry
https://vuldb.com/?id.322061
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.640690
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.643575
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.648827
Third Party Advisory
VDB Entry
https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9760.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*

Версия до 2.10.0 (включая)

EPSS

Процентиль: 17%

0.00055

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-266

Связанные уязвимости

GHSA-r53h-9rrm-9pqr

CVSS3: 8.8

github

29 дней назад

EPSS

Процентиль: 17%

0.00055

Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-266