← Database

CVE-2025-25616

MEDIUM CVSS: 4.3 Published: 2025-03-10 Modified: 2026-06-17

Description

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.

Affected Platforms

Changeweb Unifiedtransform

Weakness Type

NVD-CWE-Other, CWE-284

References