PT-2025-9246 · Serosoft Solutions Pvt · Academia Student Information System (Sis) Eagler
CVE-2025-27585
·
Publicado
2025-03-03
·
Atualizado
2025-06-27
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118
Description
A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the
Print Name parameter at the "/rest/staffResource/update" API endpoint.Recommendations
For version 1.0.118, avoid using the
Print Name parameter in the affected API endpoint until the issue is resolved. Consider temporarily restricting access to the "/rest/staffResource/update" endpoint to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Academia Student Information System (Sis) Eagler