CVE-2025-9760: Portabilis i-Educar Matricula API matricula improper authorization
A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9760?
CVE-2025-9760 is classified as a high-severity vulnerability due to the potential for improper authorization and remote exploitation.
How do I fix CVE-2025-9760?
To mitigate CVE-2025-9760, upgrade Portabilis i-Educar to version 2.11 or later, which resolves the identified weakness.
What components are affected by CVE-2025-9760?
CVE-2025-9760 affects the Matricula API specifically in the /module/Api/aluno file of Portabilis i-Educar up to version 2.10.
Can CVE-2025-9760 be exploited remotely?
Yes, CVE-2025-9760 can be exploited remotely, making it critical for administrators to take action quickly.
What type of attack is possible due to CVE-2025-9760?
CVE-2025-9760 allows for improper authorization attacks that could potentially lead to unauthorized access to sensitive information.