Security Advisory

CVE-2025-25952

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-03 00:00:00
Last updated 2025-12-12 15:24:30
Assigner mitre
State PUBLISHED

Description

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.