Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
https://github.com/changeweb/Unifiedtransform | product |
https://github.com/armaansidana2003/CVE-2025-25615 | third party advisory |