CVE-2025-8790
Portabilis i-Educar API Endpoint pessoa improper authorization
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affects unknown code of the file /module/Api/pessoa of the component API Endpoint. The manipulation of the argument ID leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
In Portabilis i-Educar bis 2.9.0 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /module/Api/pessoa der Komponente API Endpoint. Durch Beeinflussen des Arguments ID mit unbekannten Daten kann eine improper authorization-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2025-08-09 CVE Reserved
- 2025-08-10 CVE Published
- 2025-08-13 CVE Updated
- 2025-08-13 First Exploit
- 2025-08-16 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-266: Incorrect Privilege Assignment
- CWE-285: Improper Authorization
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://vuldb.com/?id.319318 | Technical Description | |
| https://vuldb.com/?submit.625918 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8790.md | 2025-08-13 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.0 Search vendor "Portabilis" for product "I-Educar" and version "2.0" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.1 Search vendor "Portabilis" for product "I-Educar" and version "2.1" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.2 Search vendor "Portabilis" for product "I-Educar" and version "2.2" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.3 Search vendor "Portabilis" for product "I-Educar" and version "2.3" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.4 Search vendor "Portabilis" for product "I-Educar" and version "2.4" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.5 Search vendor "Portabilis" for product "I-Educar" and version "2.5" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.6 Search vendor "Portabilis" for product "I-Educar" and version "2.6" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.7 Search vendor "Portabilis" for product "I-Educar" and version "2.7" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.8 Search vendor "Portabilis" for product "I-Educar" and version "2.8" | en |
Affected
| ||||||
| Portabilis Search vendor "Portabilis" | I-Educar Search vendor "Portabilis" for product "I-Educar" | 2.9.0 Search vendor "Portabilis" for product "I-Educar" and version "2.9.0" | en |
Affected
| ||||||