CVE-2025-8789

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8789
A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS

No CVSS.

References
Link Resource
https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.319317 Permissions Required VDB Entry
https://vuldb.com/?id.319317 Third Party Advisory VDB Entry
https://vuldb.com/?submit.625917 Third Party Advisory VDB Entry
https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md Exploit Third Party Advisory
https://vuldb.com/?submit.625917 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*
History

13 Aug 2025, 15:15

Type Values Removed Values Added
CWE CWE-285
CWE-639
References () https://vuldb.com/?submit.625917 - Third Party Advisory, VDB Entry () https://vuldb.com/?submit.625917 - Third Party Advisory, VDB Entry
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : unknown

12 Aug 2025, 18:21

Type Values Removed Values Added
First Time Portabilis
Portabilis i-educar
CPE cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*
References () https://vuldb.com/?submit.625917 - () https://vuldb.com/?submit.625917 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.319317 - () https://vuldb.com/?id.319317 - Third Party Advisory, VDB Entry
References () https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md - () https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.319317 - () https://vuldb.com/?ctiid.319317 - Permissions Required, VDB Entry

10 Aug 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-10 03:15

Updated : 2025-08-13 15:15

NVD link : CVE-2025-8789

Mitre link : CVE-2025-8789

JSON object : View

Products Affected

portabilis

  • i-educar
CWE

No CWE.