CVE-2025-10608: Portabilis i-Educar enrollment-history access control
A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10608?
CVE-2025-10608 is rated with a critical severity due to improper access controls that can be exploited remotely.
How do I fix CVE-2025-10608?
To mitigate CVE-2025-10608, upgrade Portabilis i-Educar to a version later than 2.10 that addresses this vulnerability.
What is the impact of CVE-2025-10608?
CVE-2025-10608 allows attackers to gain unauthorized access through the vulnerable function in the enrollment history feature.
Which versions of Portabilis i-Educar are affected by CVE-2025-10608?
CVE-2025-10608 affects all versions of Portabilis i-Educar up to and including version 2.10.
Is CVE-2025-10608 publicly exploitable?
Yes, CVE-2025-10608 is publicly exploitable as an attack can be performed remotely.