medium4.3
CVE-2025-25616
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams.
Impact
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Changeweb | Unifiedtransform | Version 2.0 |