PT-2025-24063 · Unknown · Soar Cloud Hrd Human Resource Management System

Yen Chun Shen · Publicado 2025-06-06 · Atualizado 2026-02-04 · CVE-2025-48781

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408

Description The issue allows remote attackers to obtain partial files by specifying arbitrary file paths due to an external control of file name or path vulnerability in the download file function.

Recommendations For Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408, consider restricting access to the download file function until a patch is available. As a temporary workaround, avoid using the download file function with arbitrary file paths to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-73

Identificadores relacionados

CVE-2025-48781

Produtos afetados

Soar Cloud Hrd Human Resource Management System

Referências · 8

• https://twitter.com/CVEnew/status/1930923380917616726 · Publicação no Twitter
• https://t.me/cveNotify/150857 · Publicação no Telegram
• https://t.me/cvenotify/124887 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-48781 · Aviso do Fabricante
• https://zuso.ai/advisory/za-2025-06 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-48781 · Nota de Segurança
• https://t.me/latest_high_impact_cve/2565 · Publicação no Telegram
• https://t.me/cvetracker/25602 · Publicação no Telegram