CVE-2025-10072: Portabilis i-Educar enturmar access control
A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /matricula/[IDSTUDENT]/enturmar/. Performing a manipulation results in improper access controls. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.11.0 is capable of addressing this issue. It is suggested to upgrade the affected component. The vendor confirms: "The reported attack vector was tested against the corrected code, and the previously described improper access control behavior could no longer be reproduced."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Portabilis i-Educarto a version that resolves this vulnerability.Fixed in 2.11.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10072?
CVE-2025-10072 has a high severity rating due to its potential for unauthorized access and remote exploitation.
How do I fix CVE-2025-10072?
To fix CVE-2025-10072, update Portabilis i-Educar to the latest version beyond 2.10 to ensure proper access controls.
What type of attack is associated with CVE-2025-10072?
CVE-2025-10072 is associated with a remote attack that exploits improper access controls in file processing.
Which versions of Portabilis i-Educar are affected by CVE-2025-10072?
CVE-2025-10072 affects all versions of Portabilis i-Educar up to and including version 2.10.
Can CVE-2025-10072 be exploited remotely?
Yes, CVE-2025-10072 can be exploited remotely due to the vulnerability in access controls.