CVE-2025-31338

Wisdom Master Pro - Missing Authorization PUBLISHED

Description (CNA)

A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obtain partial user data by accessing the API functionality.

Affected (CNA)

Vendor / product	Versions
SUNNET Technology Co., Ltd. / Wisdom Master Pro	affected 5.0 through 5.2

CWE

CWE-862

References

https://zuso.ai/advisory/za-2025-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.