VulnerabilityModified

CVE-2025-25953

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure.

MEDIUM 6.5EPSS 0.39%

Does this matter?

Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.

Description

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.39% probability · 32th percentile
CISA KEV: Not listed
Weakness: CWE-862
Affected: serosoft/academia student information system
Source: cve@mitre.org

References

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640Broken Link
https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953Third Party Advisory
https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.