CVE-2025-25618

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers.

CVSS v3.1 CNA

3.3 LOWCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

EPSS

0.46% chance of exploitation in the next 30 days, 39th percentile

Published

2025-03-17

Proof-of-concept exploits (1)

• armaansidana2003/CVE-2025-256180★ · 2025-03-07

Security advisories

• changeweb/Unifiedtransform

References

• CVE Record
• NVD entry

Related

• CVE-2025-25614
• CVE-2025-25615
• CVE-2025-25616
• CVE-2025-25617
• CVE-2025-25620
• CVE-2025-25621