GCVE - cpe:2.3:a:changeweb:unifiedtransform:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:changeweb:unifiedtransform:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Changeweb (`1c51eabf-a9cf-5d92-b73e-b4145962959f`)
Product	Unifiedtransform (`01c2f5f9-15e5-5561-8f71-3a22166603e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/changeweb/unifiedtransform`	purl2cpe	2026-06-01 10:10:58.753841

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-46204`	vulnerable	2026-06-08 07:25:11.310033	Details available An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint. Published: 2025-06-04T00:00:00.000Z Updated: 2025-06-04T20:45:16.800Z Open on db.gcve.eu Reference links https://github.com/changeweb/Unifiedtransform https://github.com/spbavarva/CVE-2025-46204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-46203`	vulnerable	2026-06-08 07:25:11.309674	Details available An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint. Published: 2025-06-04T00:00:00.000Z Updated: 2025-06-04T20:44:26.500Z Open on db.gcve.eu Reference links https://github.com/changeweb/Unifiedtransform https://github.com/spbavarva/CVE-2025-46203	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25621`	vulnerable	2026-06-08 07:12:51.260943	Details available Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected endpoint is /courses/teacher/index?teacher_id=2&semester_id=1. Published: 2025-03-17T00:00:00.000Z Updated: 2025-03-17T18:00:30.075Z Open on db.gcve.eu Reference links https://github.com/changeweb/Unifiedtransform https://github.com/armaansidana2003/CVE-2025-25621	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25620`	vulnerable	2026-06-08 07:12:51.260687	Details available Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function. Published: 2025-03-10T00:00:00.000Z Updated: 2025-03-10T18:47:19.935Z Open on db.gcve.eu Reference links https://github.com/changeweb/Unifiedtransform https://github.com/armaansidana2003/CVE-2025-25620	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25618`	vulnerable	2026-06-08 07:12:51.260334	Details available Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers. Published: 2025-03-17T00:00:00.000Z Updated: 2025-03-17T18:07:08.248Z Open on db.gcve.eu Reference links https://github.com/changeweb/Unifiedtransform https://github.com/armaansidana2003/CVE-2025-25618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25616`	vulnerable	2026-06-08 07:12:51.259839	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25615`	vulnerable	2026-06-08 07:12:51.259404	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25614`	vulnerable	2026-06-08 07:12:51.258937	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-53573`	vulnerable	2026-06-08 06:54:15.099872	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.