CVE-2025-4807

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-4807
A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://github.com/laifeng-boy/cve/issues/2 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.309261 Permissions Required VDB Entry
https://vuldb.com/?id.309261 Third Party Advisory VDB Entry
https://vuldb.com/?submit.572238 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:senior-walter:online_student_clearance_system:1.0:*:*:*:*:*:*:*
History

28 May 2025, 13:38

Type Values Removed Values Added
References () https://github.com/laifeng-boy/cve/issues/2 - () https://github.com/laifeng-boy/cve/issues/2 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.309261 - () https://vuldb.com/?ctiid.309261 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.309261 - () https://vuldb.com/?id.309261 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.572238 - () https://vuldb.com/?submit.572238 - Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product
First Time Senior-walter online Student Clearance System
Senior-walter
CWE CWE-22
CPE cpe:2.3:a:senior-walter:online_student_clearance_system:1.0:*:*:*:*:*:*:*

19 May 2025, 13:35

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad clasificada como problemática en SourceCodester Online Student Clearance System 1.0. Esta afecta a una parte desconocida. La manipulación permite la exposición de información a través de listados de directorios. Es posible iniciar el ataque de forma remota. Se ha hecho público el exploit y puede que sea utilizado.

16 May 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-16 20:15

Updated : 2025-05-28 13:38

NVD link : CVE-2025-4807

Mitre link : CVE-2025-4807

CVE.ORG link : CVE-2025-4807

JSON object : View

Products Affected

senior-walter

  • online_student_clearance_system
CWE
CWE-548

Exposure of Information Through Directory Listing

CWE-552

Files or Directories Accessible to External Parties

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')