PT-2025-21855 · Unknown · Sourcecodester Online Student Clearance System

Clausius Fan · CVE-2025-4887 · Published 2025-05-18 · Updated 2025-05-18

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0

Description A vulnerability has been found in the SourceCodester Online Student Clearance System, affecting some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For SourceCodester Online Student Clearance System version 1.0, consider implementing security measures to prevent cross-site request forgery attacks, such as validating user requests and ensuring proper authentication mechanisms are in place. As a temporary workaround, consider restricting access to sensitive functionalities until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-4887

Affected Products

Sourcecodester Online Student Clearance System

References · 11

• 🔥 https://github.com/ClausiusFan/CVE/blob/main/CVE_2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4887 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4887 · Vendor Advisory
• https://twitter.com/CVEnew/status/1924146174375924193 · Twitter Post
• https://vuldb.com/?submit.577487 · Note
• https://vuldb.com/?id.309440 · Note
• https://t.me/cvetracker/24162 · Telegram Post
• https://sourcecodester.com · Note
• https://t.me/cvenotify/122826 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1924159857986285914 · Twitter Post
• https://vuldb.com/?ctiid.309440 · Note