Unifiedtransform
Approved changes feed: RSS · Atom
cpe:2.3:a:unifiedtransform:unifiedtransform:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unifiedtransform (01095081-6181-553b-bf77-e94777807bc9) |
|---|---|
| Product | Unifiedtransform (a10a13d4-4a26-589a-ade8-5050c48c2aa5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12307 |
vulnerable | 2026-06-08 06:23:51.695438 |
Function-Level Access Control Vulnerability Allows Unauthorized Modification of Student Data in Unifiedtransform
MEDIUM (4.3)
A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization. The vulnerability exists due to missing access control checks in the student editing functionality. At the time of publication of the CVE no patch is available.
Published: 2024-12-09T08:50:45.498Z
Updated: 2024-12-09T15:28:13.019Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12306 |
vulnerable | 2026-06-08 06:23:51.694961 |
Access Control Vulnerabilities Allow Unauthorized Access to User Profiles in Unifiedtransform
MEDIUM (4.3)
Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers. The vulnerabilities include both function-level access control issues in list viewing endpoints and object-level access control issues in profile viewing endpoints. A malicious student user can access personal information of other students and teachers through these vulnerabilities. At the time of publication of the CVE no patch is available.
Published: 2024-12-09T08:50:23.241Z
Updated: 2024-12-09T15:27:21.662Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12305 |
vulnerable | 2026-06-08 06:23:51.694521 |
Object-Level Access Control Vulnerability Allows Unauthorized Access to Student Grades in Unifiedtransform
MEDIUM (4.3)
An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student_id parameter in the marks viewing endpoint. The vulnerability exists due to insufficient access control checks in MarkController.php. At the time of publication of the CVE no patch is available.
Published: 2024-12-09T08:49:53.971Z
Updated: 2024-12-09T15:30:21.269Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.