HIGH
Ventem｜e-School - Missing Authorization
Published Jul 30, 2025
8.7
HIGHCVSS 4.0
EPSS 0.38%
Description
The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administrator functions, including creating, modifying, and deleting accounts. They can even escalate any account to system administrator privilege.
Affected products
-
- Version 0StatusaffectedConstraints-
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
If your school runs system on-premises, please contact the vendor to confirm the update status or consider restricting access to the campus network only
Weaknesses (1)
References (2)
- https://www.twcert.org.tw/en/cp-139-10305-2eca0-2.html third-party-advisory
- https://www.twcert.org.tw/tw/cp-132-10304-6b375-1.html third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.twcert.org.tw/en/cp-139-10305-2eca0-2.html | third-party-advisory | |
| https://www.twcert.org.tw/tw/cp-132-10304-6b375-1.html | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner twcert
Published Jul 30, 2025
Updated Jul 30, 2025
Reserved Jul 30, 2025
Link CVE-2025-8322
CISA Vulnrichment
Updated Jul 30, 2025