PT-2025-14803 · Unknown · Student-Manage

Published 2025-04-03 · Updated 2025-10-15 · CVE-2025-29504

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions student-manage version 1

Description The issue allows a local attacker to escalate privileges due to insecure permission verification. This is achieved through the unsafe permission verification process.

Recommendations For version 1, consider restricting access to sensitive areas of the system to minimize the risk of privilege escalation until a proper fix is applied. As a temporary workaround, review and adjust the permission verification process to ensure it is secure.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-29504

Affected Products

Student-Manage

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-29504 · Security Note
• https://gitee.com/huang-yk/student-manage/issues/IBQ14H · Vendor Advisory
• https://t.me/cveNotify/138811 · Telegram Post
• https://t.me/cvedetector/22024 · Telegram Post
• https://twitter.com/CVEnew/status/1908072066093339059 · Twitter Post