{"id":"CVE-2025-4807","aliases":["EUVD-2025-15554","GHSA-42jj-4cc5-rm9v"],"status":"published","title":"SourceCodester Online Student Clearance System exposure of information through directory listing","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01246,"percentile":0.69508,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-548","CWE-552"],"published":"2025-05-16T19:31:05Z","modified":"2026-06-17T09:34:03Z","products":[{"vendor":"senior-walter","product":"online_student_clearance_system"},{"vendor":"sourcecodester","product":"online student clearance system"}],"references":[{"url":"https://vuldb.com/?id.309261","tags":["vdb-entry","Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.309261","tags":["signature","permissions-required","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.572238","tags":["third-party-advisory","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/laifeng-boy/cve/issues/2","tags":["exploit","issue-tracking","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4807"},{"url":"https://www.sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-42jj-4cc5-rm9v"}],"sources":{"cve":[{"id":"CVE-2025-4807","title":"SourceCodester Online Student Clearance System exposure of information through directory listing","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-05-16T19:31:05.433Z","modified":"2025-05-17T02:35:32.751Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","assessor":"cna"}],"cwes":["CWE-548","CWE-552"],"updated_at":"2026-11-02T14:32:48.512547Z"}],"euvd":[{"id":"EUVD-2025-15554","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-05-16T19:31:05Z","modified":"2025-05-17T02:35:32Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:32:45.127966Z"}],"ghsa":[{"id":"GHSA-42jj-4cc5-rm9v","title":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student...","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-05-16T21:32:12Z","modified":"2025-05-28T15:34:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-22","CWE-548"],"updated_at":"2026-11-02T15:02:27.916753Z"}],"nvd":[{"id":"CVE-2025-4807","description":"A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.","status":"published","published":"2025-05-16T20:15:22.453Z","modified":"2026-06-17T09:34:03.28Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-548","CWE-552","CWE-22"],"updated_at":"2026-11-02T14:11:08.321805Z"}]}}