What is CVE-2025-25953?

CVE-2025-25953 is a medium-severity vulnerability in Serosoft Academia Student Information System, classified under Missing Authorization. CVSS score: 6.5/10. Published 2025-03-03.

How severe is CVE-2025-25953?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Serosoft Academia Student Information System

CVE-2025-25953

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

Vulnerability class: Broken Access Control

EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N.

Affected products

Serosoft Academia_student_information_system — versions eagler-1.0.118
N/a — versions n/a

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

cve@mitre.org (Broken Link)
cve@mitre.org (Third Party Advisory)
cve@mitre.org

Frequently asked questions

What is CVE-2025-25953?: CVE-2025-25953 is a medium-severity vulnerability in Serosoft Academia Student Information System, classified under Missing Authorization. CVSS score: 6.5/10. Published 2025-03-03.
How severe is CVE-2025-25953?: Medium severity. CVSS v3 base score is 6.5 out of 10.