CVE-2024-41250

Summary

CVE-2024-41250 is a newly discovered vulnerability affecting the Kashipara Responsive School Management System version 3.2.0. This issue involves an Incorrect Access Control flaw in the /smsa/view_students.php file. Unauthenticated remote attackers can exploit this weakness to gain access to sensitive STUDENT information without proper authorization. This vulnerability poses a significant risk to data privacy and security in educational institutions using the affected software. It is strongly recommended that users update their systems to the latest version or apply relevant patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.