CVE-2025-10607: Portabilis i-Educar diarioApi information disclosure
A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Avaliacao/diarioApi. Such manipulation leads to information disclosure. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10607?
CVE-2025-10607 is classified as a high severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2025-10607?
To fix CVE-2025-10607, users should upgrade Portabilis i-Educar to version 2.11 or later.
What does CVE-2025-10607 affect?
CVE-2025-10607 affects the file /module/Avaliacao/diarioApi within Portabilis i-Educar versions up to 2.10.
Can CVE-2025-10607 be exploited remotely?
Yes, CVE-2025-10607 can be exploited remotely by manipulating a specific function in the affected software.
Is information disclosure a risk in CVE-2025-10607?
Yes, CVE-2025-10607 poses a risk of information disclosure if exploited.