Serosoft Solutions Academia SIS EagleR Incorrect Access Control Vulnerability Allowing User Account Modification

A vulnerability exists in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118, due to incorrect access control in the staff resource creation endpoint. This flaw allows unauthorized users to create and modify user accounts, including those of administrators.

Impact

Exploitation of this vulnerability could lead to unauthorized creation and modification of user accounts, potentially allowing for elevated privileges if an administrator account is altered.