medium4.3
CVE-2025-25621
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers.
Impact
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Changeweb | Unifiedtransform | Version 2.0 |