Missing Authorization Vulnerability in Wisdom Master Pro by Zuso
CVE-2025-31338

6.9MEDIUM

Key Information:

Vendor

Sunnet Technology Co., Ltd.

Status
Wisdom Master Pro
Vendor
CVE Published:
17 April 2025

What is CVE-2025-31338?

A significant vulnerability exists in the Wisdom Master Pro application, affecting versions 5.0 to 5.2. This flaw allows remote attackers to exploit a missing authorization check in the retrieve teacher information function, potentially enabling unauthorized access to partial user data through the application's API. Organizations using affected versions should assess their exposure and implement necessary measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Wisdom Master Pro 5.0 <= 5.2

References

https://zuso.ai/advisory/za-2025-01
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.