CNNVD-202509-2713 Information
Sep 17, 2025
cve
CNNVD ID
CNNVD-202509-2713
Related CVE
- CNNVD Published: 2025-09-17
Description (Chinese)
i-Educar是Portábilis开源的一个免费教育软件。 i-Educar 2.10及之前版本存在访问控制错误漏洞，该漏洞源于文件/enrollment-history/中未知函数存在访问控制不当，可能导致远程攻击。
Description (English)
i-Educar is a free education software from Portábilis. i-Educar 2.10 and previous versions have access control bugs, which stem from inappropriate access controls in unknown functions in file/environment-history/, which may lead to long-range attacks.
Hazard Level
High
Vulnerability Type
访问控制错误
Affected Vendor
PostHog
Published
2025-09-17
Last Modified
2026-02-24
References
https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60.enrollment-history.(ID)%60%20Endpoint.md https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10608.md https://vuldb.com/?ctiid.324628 https://vuldb.com/?id.324628 https://vuldb.com/?submit.649876
Share on: