Serosoft Solutions Pvt · Serosoft Solutions Pvt Ltd Academia Student Information System (Sis) Eagler · CVE-2025-25953
**Name of the Vulnerable Software and Affected Versions**
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118
**Description**
The issue concerns an Azure JWT access token exposure, allowing authenticated attackers to escalate privileges and access sensitive information.
**Recommendations**
For version 1.0.118, consider restricting access to sensitive information and implementing additional security measures to prevent privilege escalation until a patch is available. As a temporary workaround, consider disabling the use of Azure JWT access tokens in the affected system until the issue is resolved.