CVE-2025-10013

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-10013
A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 2.12 mitigates this issue. The patch is named d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60exportacao-para-o-seb%60%20Endpoint.md Broken Link
https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10013.md Exploit Third Party Advisory
https://github.com/portabilis/i-educar/
https://github.com/portabilis/i-educar/commit/d53365e5656f6499a4deddf89d522814655f769d
https://github.com/portabilis/i-educar/tree/2.12
https://vuldb.com/cve/CVE-2025-10013
https://vuldb.com/submit/643567
https://vuldb.com/vuln/322738
https://vuldb.com/vuln/322738/cti
Configurations

Configuration 1 (hide)

cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*
History

20 Oct 2026, 22:17

Type Values Removed Values Added
Summary (en) A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. (en) A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 2.12 mitigates this issue. The patch is named d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.
References
  • {'url': 'https://vuldb.com/?ctiid.322738', 'tags': ['Permissions Required', 'VDB Entry'], 'source': 'cna@vuldb.com'}
  • {'url': 'https://vuldb.com/?id.322738', 'tags': ['Third Party Advisory', 'VDB Entry'], 'source': 'cna@vuldb.com'}
  • {'url': 'https://vuldb.com/?submit.643567', 'tags': ['Third Party Advisory', 'VDB Entry'], 'source': 'cna@vuldb.com'}
  • () https://github.com/portabilis/i-educar/ -
  • () https://github.com/portabilis/i-educar/commit/d53365e5656f6499a4deddf89d522814655f769d -
  • () https://github.com/portabilis/i-educar/tree/2.12 -
  • () https://vuldb.com/cve/CVE-2025-10013 -
  • () https://vuldb.com/submit/643567 -
  • () https://vuldb.com/vuln/322738 -
  • () https://vuldb.com/vuln/322738/cti -

30 Sep 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad fue detectada en Portabilis i-Educar hasta la versión 2.10. Esto afecta una función desconocida del archivo /exportacao-para-o-seb. Realizar una manipulación resulta en controles de acceso inadecuados. El ataque puede ser llevado a cabo remotamente. El exploit ahora es público y puede ser utilizado.
Information

Published : 2025-09-05 16:15

Updated : 2026-10-20 22:17

NVD link : CVE-2025-10013

Mitre link : CVE-2025-10013

CVE.ORG link : CVE-2025-10013

JSON object : View

Products Affected

portabilis

  • i-educar
CWE
CWE-266

Incorrect Privilege Assignment

CWE-284

Improper Access Control