← volver
CVE-2025-67298

CVE-2025-67298

CVSS 8.1 HIGHEPSS 0.2%CWE-290CWE-345CWE-639
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://gist.github.com/prashunbaral/70c4f6f9d9ff8b82295623073eb41f3ahttps://github.com/classroomio/classroomio/releases/tag/v0.2.6