← Database

CVE-2025-27583

CRITICAL CVSS: 9.1 Published: 2025-03-03 Modified: 2026-06-17

Description

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

Affected Platforms

Serosoft Academia Student Information System

Weakness Type

CWE-862

References