Unifiedtransform Privilege Escalation Vulnerability Allowing Unauthorized Changes to Section Details

A vulnerability in Unifiedtransform version 2.0 allows teachers to escalate privileges by changing section names and room numbers, actions that should be reserved for administrators. This issue arises from incorrect access control, enabling unauthorized modifications that could disrupt academic management and operations.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in section management, causing potential confusion and mismanagement in academic settings.

Reproduction

To reproduce this vulnerability, log into the application as a teacher. Navigate to the section editing endpoint, and modify the section name and room number fields. After making the changes, save the modifications.