CVE-2025-25950

HIGH CVSS: 8.1 Published: 2025-03-03 Modified: 2026-06-17

Description

Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

Affected Platforms

Serosoft Academia Student Information System

Weakness Type

CWE-284

References

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89637
https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25950
https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25950