GHSA-jff6-cpxv-52x3MediumCVSS 6.3
A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this...
🔗 CVE IDs covered (1)
📋 Description
A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this issue is some unknown functionality of the file app/Http/Controllers/AccessLevelController.php of the component User Type Handler. The manipulation leads to insecure inherited permissions. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
🔗 References (14)
- https://nvd.nist.gov/vuln/detail/CVE-2025-11554
- https://docs.google.com/document/d/1yGubpU9I6JnkKsrdNRP6bUCeQv3ZDcknXAHOzFZBkGQ
- https://vuldb.com/?ctiid.327714
- https://vuldb.com/?id.327714
- https://vuldb.com/?submit.671072
- https://github.com/m3m0o/portabilis-ieducar-user-type-privilege-escalation
- https://github.com/portabilis/i-educar/commit/d53365e5656f6499a4deddf89d522814655f769d
- https://github.com/portabilis/i-educar
- https://github.com/portabilis/i-educar/tree/2.12
- https://vuldb.com/cve/CVE-2025-11554
- https://vuldb.com/submit/671072
- https://vuldb.com/vuln/327714
- https://vuldb.com/vuln/327714/cti
- https://github.com/advisories/GHSA-jff6-cpxv-52x3