Exposure of Sensitive Information in Student Learning Assessment Software by JHENG GAO
CVE-2025-14712

8.7HIGH

Key Information:

Vendor

Jheng Gao

Status
Student Learning Assessment And Support System
Vendor
CVE Published:
15 December 2025

What is CVE-2025-14712?

The Student Learning Assessment and Support System, created by JHENG GAO, has a significant vulnerability that allows unauthorized remote attackers to access sensitive information. This flaw facilitates the exposure of test accounts and passwords by enabling unauthenticated users to view specific pages within the system, potentially compromising user data and system integrity. Organizations utilizing this software must ensure they implement necessary security measures to mitigate this risk.

Affected Version(s)

Student Learning Assessment and Support System 0

References

https://www.twcert.org.tw/tw/cp-132-10570-72e31-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10571-a0c2a-2.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-14712 : Exposure of Sensitive Information in Student Learning Assessment Software by JHENG GAO