CVE-2025-27583

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118

Description The issue is related to incorrect access control in the component "/rest/staffResource/findAllUsersAcrossOrg" of the affected software, allowing unauthorized creation and modification of user accounts, including an Administrator account.

Recommendations For version 1.0.118, consider restricting access to the /rest/staffResource/findAllUsersAcrossOrg endpoint until a fix is available. Additionally, review and limit user account creation and modification privileges to authorized personnel only.