PT-2025-38249 · Portabilis · I-Educar

Marceloqz · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10608

Mitre

CVSS v3.1

6.3

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2025-10608

Affected Products

I-Educar

References · 6

• 🔥 https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60.enrollment-history.(ID)%60%20Endpoint.md · Exploit
• 🔥 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10608.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10608 · Security Note
• https://vuldb.com/?submit.649876 · Note
• https://vuldb.com/?ctiid.324628 · Note
• https://vuldb.com/?id.324628 · Note