CVE-2025-25616

Publication date

2025-03-10 00:00:00

Family

mitre

State

PUBLISHED

Description

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.