CVE-2025-4807 SourceCodester Online Student Clearance System exposure of information through directory listing

Medium 6.9 Published 16 May 2025 Updated 17 May 2025

Remote attackers can access sensitive files via directory listing in the Online Student Clearance System, exposing internal data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-4807?

CVE-2025-4807 is a medium-severity vulnerability in SourceCodester Online Student Clearance System, published on 16 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness: CWE-22, CWE-552, CWE-548

Which versions are affected by CVE-2025-4807?

It affects 1 product.

Products include Senior-Walter Online Student Clearance System.

How do I fix CVE-2025-4807?

No fix has been published for CVE-2025-4807 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-4807 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-4807 exists.

Sources

Also known as GHSA-42jj-4cc5-rm9v.