← Database

CVE-2025-25952

MEDIUM CVSS: 6.5 Published: 2025-03-03 Modified: 2026-06-17

Description

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.

Affected Platforms

Serosoft Academia Student Information System

Weakness Type

CWE-639

References