CVE-2025-25767

Name of the Vulnerable Software and Affected Versions MRCMS version 3.1.2

Description A vertical privilege escalation issue in the /controller/UserController.java component allows attackers to delete users arbitrarily via a crafted request.

Recommendations For MRCMS version 3.1.2, consider restricting access to the UserController.java component until a patch is available. As a temporary workaround, avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.