CVE-2025-11049: Portabilis i-Educar unificacao-aluno improper authorization
A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11049?
CVE-2025-11049 has been rated as a high severity vulnerability due to improper authorization that could allow for unauthorized actions.
How do I fix CVE-2025-11049?
To mitigate CVE-2025-11049, it is recommended to update Portabilis i-Educar to the latest version beyond 2.10 that addresses this vulnerability.
What vulnerability does CVE-2025-11049 exploit?
CVE-2025-11049 exploits a flaw in the authorization process of the /unificacao-aluno functionality within Portabilis i-Educar.
Can CVE-2025-11049 be exploited remotely?
Yes, CVE-2025-11049 allows for remote exploitation due to improper authorization.
Who is affected by CVE-2025-11049?
CVE-2025-11049 affects users of Portabilis i-Educar versions up to and including 2.10.