CVE-2025-14712 JHENG GAO｜Student Learning Assessment and Support System - Exposure of Sensitive Information
Unauthenticated attackers can view a specific page to obtain test accounts and passwords, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-14712?
CVE-2025-14712 is a high-severity vulnerability in JHENG GAO Student Learning Assessment and Support System, published on 15 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain test accounts and password.
Weakness: CWE-497
Which versions are affected by CVE-2025-14712?
How do I fix CVE-2025-14712?
No fix has been published for CVE-2025-14712 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-14712 being exploited?
There is no known exploitation of CVE-2025-14712 in the wild and no public exploit code.
Sources
Also known as GHSA-jpjm-2g38-x396.