Priority MEDIUM 64
An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00414 · Published 2025-06-04 · No fix listed CWE-266
Priority MEDIUM 64
An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00384 · Published 2025-06-04 · No fix listed CWE-266
Priority MEDIUM 64
Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users.
CVSS 3.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00468 · Published 2025-03-20 · No fix listed CWE-862
Priority MEDIUM 53
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers.
CVSS 3.1MEDIUM 4.3· Network · High privileges · User interaction · EPSS 0.00391 · Published 2025-03-17 · No fix listed CWE-284
Priority MEDIUM 51
Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers.
CVSS 3.1LOW 3.3· Network · High privileges · No interaction · EPSS 0.00465 · Published 2025-03-17 · No fix listed CWE-284
Priority MEDIUM 58
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00572 · Published 2025-03-10 · No fix listed CWE-79
Priority HIGH 66
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams.
CVSS 3.1HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.00423 · Published 2025-03-10 · No fix listed CWE-284
Priority MEDIUM 60
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.
CVSS 3.1MEDIUM 6.0· Network · High privileges · No interaction · EPSS 0.00496 · Published 2025-03-10 · No fix listed CWE-284
Priority HIGH 73
Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the personal data of fellow teachers.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00798 · Published 2025-03-10 · No fix listed CWE-284
Priority HIGH 82
Unifiedtransform v2.X is vulnerable to Incorrect Access Control.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00543 · Published 2025-02-26 · No fix listed CWE-284
THREATIST.IORead the docs