CVE-2025-25953 Information disclosure in n/a
Authenticated attackers can access exposed Azure JWT tokens to escalate privileges and view sensitive data in Academia SIS EagleR.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-25953?
CVE-2025-25953 is a medium-severity vulnerability in n/a, published on 3 Mar 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.
Weakness: CWE-862
Which versions are affected by CVE-2025-25953?
It affects 1 product.
Products include Serosoft Academia Student Information System.
How do I fix CVE-2025-25953?
No fix has been published for CVE-2025-25953 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-25953 being exploited?
There is no known exploitation of CVE-2025-25953 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-634g-m7q6-xphf.