Filtered by vendor Changeweb Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-53573 1 Changeweb 1 Unifiedtransform 2025-04-07 9.8 Critical
Unifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access and manipulate endpoints intended exclusively for administrative use. This issue specifically affects teacher/edit/{id}.
CVE-2025-25616 1 Changeweb 1 Unifiedtransform 2025-03-13 7.6 High
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The affected endpoint is /exams/edit-rule?exam_rule_id=1.
CVE-2025-25615 1 Changeweb 1 Unifiedtransform 2025-03-13 6 Medium
Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sections.