Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-67298 An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile https://www.cve.org/CVERecord?id=CVE-2025-67298
Post summary
The post announces CVE-2025-67298 as a remote privilege escalation vulnerability in ClasroomIO versions prior to 0.2.6, detailing the affected endpoints.
🟠 CVE-2025-67298 - High An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile https://www.thehackerwire.com/vulnerability/CVE-2025-67298/ https://t.co/YPBYyDSyrj
Post summary
ClassroomIO versions prior to 0.2.6 are vulnerable to privilege escalation via the /api/verify and /rest/v1/profile endpoints; no exploits, patches, or active usage are reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | classroomio | classroomio | - | - | - |