CVE-2025-8789: Portabilis i-Educar API Endpoint Diario authorization
A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8789?
CVE-2025-8789 is classified as a problematic vulnerability.
How does CVE-2025-8789 affect Portabilis i-Educar?
CVE-2025-8789 affects the API Endpoint component of Portabilis i-Educar, specifically altering authorization processes.
Is it possible to exploit CVE-2025-8789 remotely?
Yes, CVE-2025-8789 can be exploited remotely.
What is the impact of an authorization bypass due to CVE-2025-8789?
The authorization bypass caused by CVE-2025-8789 may allow unauthorized users access to sensitive functionality.
How can I mitigate CVE-2025-8789?
Mitigation for CVE-2025-8789 involves updating Portabilis i-Educar to a version beyond 2.9.0.