CNNVD-202509-1015 Information

CNNVD ID

CNNVD-202509-1015

CVE-2025-10072

  • CNNVD Published: 2025-09-07

Description (Chinese)

Portábilis i-Educar是Portábilis公司的一款应用程序。可以方便地帮助您进行基础教育和技术教育。 Portábilis i-Educar 2.10及之前版本存在访问控制错误漏洞,该漏洞源于文件/matricula/[ID_STUDENT]/enturmar/中访问控制不当。

Description (English)

Portábilis i-Educar is a Portábilis application. You can easily be assisted in basic and technical education. Portábilis i-Educar 2.10 and previous versions had access control errors, which stemmed from inappropriate access controls in documents/matricula/[ID STUDENT]/enturmar/.

Hazard Level

High

Vulnerability Type

访问控制错误

Affected Vendor

Portábilis

Published

2025-09-07

Last Modified

2026-02-24

References

https://vuldb.com/?id.323020 https://vuldb.com/?ctiid.323020 https://vuldb.com/?submit.644135 https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20%20in%20.matricula.(ID_STUDENT).enturmar.(ID_CLASS)%60%20Endpoint.md https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10072.md https://access.redhat.com/security/cve/cve-2025-10072

Share on: