CVE-2024-53573

9.8 criticalEPSS 0.5%

Critical (9.8) in changeweb unifiedtransform. EPSS 0.5% chance of exploitation in the next 30 days.

Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/{id}.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

changeweb:unifiedtransform

References

https://drive.google.com/file/d/14Or6QIpOeLEqdFm1mwxdE_NNCOwMmcFc/view
https://www.getastra.com/blog/vulnerability/improper-access-control-in-school-management-system-unifiedtransform/
https://drive.google.com/file/d/14Or6QIpOeLEqdFm1mwxdE_NNCOwMmcFc/view

Check your stack JSON