CVE-2025-0625: CampCodes School Management Software Attachment resource injection
First published: Wed Jan 22 2025(Updated: )
A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Campcodes School Management Software | ||
| Campcodes School Management Software | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0625?
CVE-2025-0625 is classified as problematic due to its potential for improper control of resource identifiers.
How do I fix CVE-2025-0625?
To fix CVE-2025-0625, it is recommended to update CampCodes School Management Software to the latest version that addresses the vulnerability.
Which component is affected by CVE-2025-0625?
CVE-2025-0625 affects the Attachment Handler component of CampCodes School Management Software.
What type of attacks can be initiated due to CVE-2025-0625?
CVE-2025-0625 allows for the initiation of attacks that exploit improper control of resource identifiers.
Is there a risk of data breach with CVE-2025-0625?
Yes, vulnerabilities like CVE-2025-0625 can lead to data breaches if exploited by attackers.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- vendor/campcodes
- canonical/campcodes school management software
- version/campcodes school management software/1.0