Changeweb: >> Unifiedtransform Security Vulnerabilities
An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-06-04
An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-06-04
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.
CVSS Score
4.3
EPSS Score
0.002
Published
2025-03-10
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.
CVSS Score
2.7
EPSS Score
0.002
Published
2025-03-10
Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/{id}.
CVSS Score
9.8
EPSS Score
0.001
Published
2025-02-26