Missing Authorization Vulnerability in e-School by Ventem
CVE-2025-8322
8.8HIGH
What is CVE-2025-8322?
The e-School application from Ventem is susceptible to a missing authorization vulnerability, which permits remote attackers, operating with ordinary privileges, to gain unauthorized access to critical administrator functions. This flaw enables them to create, modify, and delete user accounts within the system. Additionally, attackers can escalate any user account to system administrator privileges, posing a significant risk to the integrity and security of the entire application.