CVE-2025-3564mediumCWE-266CWE-285

CVE-2025-3564: medium-severity vulnerability in code-projects StudentManager

huanfenz/code-projects StudentManager Teacher String improper authorization

Published

Follow this CVE+ Monitor StudentManager+ Monitor StudentManager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
code-projects · StudentManagerhuanfenz · StudentManager
Related CVEs — code-projects StudentManager

In the same product, most dangerous first.

CVE-2025-3565MEDIUMhuanfenz/code-projects StudentManager Announcement Management Section uploadArticle.do unrestricted uploadEPSS 0.6%