CVE-2025-31338CWE-862

Wisdom Master Pro - Missing Authorization

Medium · published April 17, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obtain partial user data by accessing the API functionality.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00463 · 39.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-04-17T02:01Z
EPSS history
Timeline
  • 17 APR 02:01Z
    Wisdom Master Pro - Missing Authorization
    cvelistv5