CVE-2025-10073

A vulnerability was determined in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Api/turma. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-266
• CWE-285

• https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Object%20Level%20Authorization%20(BOLA)%20allows%20enumeration%20of%20classes%20informations%20via%20.module.Api.turma.mdBroken Link
• https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10073.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.323021Permissions Required, VDB Entry
• https://vuldb.com/?id.323021Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.644136Third Party Advisory, VDB Entry

Published

Sep 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10067A vulnerability was detected in itsourcecode POS Point of Sa…6.1
• CVE-2025-10068A flaw has been found in itsourcecode Online Discussion Foru…9.8
• CVE-2025-1007In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/{…5.3
• CVE-2025-10070A flaw has been found in Portabilis i-Educar up to 2.10. Thi…6.3
• CVE-2025-10071A vulnerability has been found in Portabilis i-Educar up to …6.3
• CVE-2025-10072A vulnerability was found in Portabilis i-Educar up to 2.10.…6.3
• CVE-2025-10074A vulnerability was identified in Portabilis i-Educar up to …5.4
• CVE-2025-10075A security flaw has been discovered in SourceCodester Online…5.4
• CVE-2025-10076A weakness has been identified in SourceCodester Online Poll…9.8
• CVE-2025-10077A security vulnerability has been detected in SourceCodester…9.8
• CVE-2025-10078A vulnerability was detected in SourceCodester Online Pollin…9.8
• CVE-2025-10079A flaw has been found in PHPGurukul Small CRM 4.0. Affected …9.8