PT-2025-10008 · Unknown · Student-Manage

Jing1 · Published 2025-03-06 · Updated 2025-03-07 · CVE-2025-2042

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions huang-yk student-manage version 1.0

Description A vulnerability has been found in huang-yk student-manage and classified as problematic. This issue affects unknown code and leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For huang-yk student-manage version 1.0, as a temporary workaround, consider implementing additional security measures to prevent cross-site request forgery attacks until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-2042

Affected Products

Student-Manage

References · 8

• 🔥 https://github.com/Jingyi-u/student-manage/tree/main · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2042 · Security Note
• https://twitter.com/CVEnew/status/1897878648029339730 · Twitter Post
• https://twitter.com/CVETracker/status/1898101531880108318 · Twitter Post
• https://vuldb.com/?id.298786 · Note
• https://vuldb.com/?submit.512940 · Note
• https://t.me/cvedetector/19753 · Telegram Post
• https://vuldb.com/?ctiid.298786 · Note