AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-12305

MEDIUM · CVSS 4.3 EPSS 0.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-09 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.

CVE
CVE-2024-12305
Severity
MEDIUM
CVSS
4.3
EPSS
0.25%

Original NVD Description

An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student_id parameter in the marks viewing endpoint. The vulnerability exists due to insufficient access control checks in MarkController.php. At the time of publication of the CVE no patch is available.