CVE-2024-53637

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118

Description The issue is related to incorrect access control in the component /rest/staffResource/create, allowing unauthorized creation and modification of user accounts, including an Administrator account.

Recommendations For version 1.0.118, consider restricting access to the /rest/staffResource/create endpoint until a fix is available. As a temporary workaround, limit the ability to create and modify user accounts to prevent potential exploitation.