CVE-2025-25953

6.5 mediumEPSS 0.4%

Medium (6.5) in serosoft academia student information system. EPSS 0.4% chance of exploitation in the next 30 days.

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2025-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

serosoft:academia_student_information_system

References

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640
https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953
https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953

Check your stack JSON