CVE-2025-25953

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-03 · updated 2026-06-17
Weakness: CWE-862

Description

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

Affected products

Serosoft Academia Student Information System: eagler-1.0.118

References

https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640
https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2025-25953
https://github.com/el-viper/cve-research/tree/main/CVEs/CVE-2025-25953

Get alerted when CVE-2025-25953 or the next vulnerability affects your stack