PT-2025-9243 · Serosoft Solutions Pvt · Serosoft Solutions Pvt Ltd Academia Student Information System (Sis) Eagler

Patrick Mkhael · Published 2025-03-03 · Updated 2025-12-12 · CVE-2025-25953

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118

Description The issue concerns an Azure JWT access token exposure, allowing authenticated attackers to escalate privileges and access sensitive information.

Recommendations For version 1.0.118, consider restricting access to sensitive information and implementing additional security measures to prevent privilege escalation until a patch is available. As a temporary workaround, consider disabling the use of Azure JWT access tokens in the affected system until the issue is resolved.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-25953

Affected Products

Serosoft Solutions Pvt Ltd Academia Student Information System (Sis) Eagler

References · 14

• 🔥 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953 · Exploit
• 🔥 https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953 · Exploit
• 🔥 https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25953 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25953 · Vendor Advisory
• https://t.me/cvenotify/113036 · Telegram Post
• https://twitter.com/CVEnew/status/1896399745309868084 · Twitter Post
• https://twitter.com/bluepinksec/status/1896455994407780416 · Twitter Post
• https://t.me/cveNotify/145629 · Telegram Post
• https://twitter.com/cracbot/status/1898327951382663266 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1896389520066490801 · Twitter Post
• https://t.me/cvedetector/19284 · Telegram Post
• https://t.me/cvenotify/113580 · Telegram Post
• https://twitter.com/cracbot/status/1897965567761695042 · Twitter Post