Low
Portabilis i-Educar exportacao-para-o-seb access control
Type: advisorySources: OSV
A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 2.12 mitigates this issue. The patch is named d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-10013
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 02:01 UTC · Revision 1
Source evidence
Portabilis i-Educar exportacao-para-o-seb access control
core-osv · Original sourcePublished 5 Sept 2025, 15:32 UTC
A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 2.12 mitigates this issue. The patch is named d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.
osv:CVE-2025-10013
Complete source record
{
"id": "2cfc87c789c343612a945b0d5777bfd95eb1137ddca8436eb19ac25f578086fa",
"url": "https://osv.dev/vulnerability/CVE-2025-10013",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Portabilis i-Educar exportacao-para-o-seb access control",
"summary": "A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 2.12 mitigates this issue. The patch is named d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.",
"evidence": "osv:CVE-2025-10013",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2025-10013",
"aliases": [
"CVE-2025-10013"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/portabilis/i-educar",
"type": "GIT",
"events": [
{
"introduced": "290beff8b941dd594038ab058b083c85651655e5"
},
{
"fixed": "d53365e5656f6499a4deddf89d522814655f769d"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "2.0"
},
{
"last_affected": "2.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.2"
},
{
"last_affected": "2.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.3"
},
{
"last_affected": "2.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.4"
},
{
"last_affected": "2.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.5"
},
{
"last_affected": "2.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.6"
},
{
"last_affected": "2.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.7"
},
{
"last_affected": "2.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.8"
},
{
"last_affected": "2.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.9"
},
{
"last_affected": "2.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "2.10"
},
{
"last_affected": "2.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"fixed": "d53365e5656f6499a4deddf89d522814655f769d"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"2.0",
"2.1",
"2.10",
"2.2",
"2.3",
"2.4",
"2.5",
"2.6",
"2.7",
"2.8",
"2.9",
"2.1.21",
"2.1.20",
"2.1.19",
"2.1.18",
"2.1.17",
"2.1.16",
"2.1.15",
"2.1.14",
"2.1.13",
"2.1.12",
"2.1.11",
"2.1.10",
"2.1.9",
"2.1.8",
"2.1.7",
"2.1.6",
"2.1.5",
"2.1.4",
"2.1.3",
"2.1.2",
"2.1.1",
"2.1.0",
"2.0.11",
"2.0.10",
"2.0.9",
"2.0.8.1",
"2.0.8",
"2.0.7",
"2.0.6",
"2.0.5",
"2.0.4",
"2.0.3",
"2.0.2",
"2.0.1",
"2.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10013.json"
}
}
],
"modified": "2026-10-28T02:30:48.887708067Z",
"provider": "osv",
"references": [
"https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10013.md",
"https://github.com/portabilis/i-educar/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10013.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-10013",
"https://vuldb.com/cve/CVE-2025-10013",
"https://vuldb.com/submit/643567",
"https://vuldb.com/vuln/322738",
"https://vuldb.com/vuln/322738/cti",
"https://github.com/portabilis/i-educar/commit/d53365e5656f6499a4deddf89d522814655f769d",
"https://github.com/portabilis/i-educar/tree/2.12",
"https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60exportacao-para-o-seb%60%20Endpoint.md"
],
"provider_metadata": {
"cwe_ids": [
"CWE-266",
"CWE-284"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10013.json"
}
},
"related_cves": [
{
"value": "CVE-2025-10013",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 517195,
"published_at": "2025-09-05T15:32:05.124+00:00"
}