VULNERABILITY INTELLIGENCE

CVE-2025-25953

CVSS score6.5 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-862

Primary references