PT-2025-20653 · Unknown · Seeyon Zhiyuan Oa Web Application System

Caichaoxiong · Published 2025-05-11 · Updated 2025-05-11 · CVE-2025-4531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Seeyon Zhiyuan OA Web Application System version 8.1 SP2

Description A critical issue affects the function postData of the file ROOTWEB-INFclassescomourswwwehrsalaryservicedataEhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider disabling the postData function of the EhrSalaryPayrollServiceImpl.class file until a patch is available. Restrict access to the Beetl Template Handler component to minimize the risk of exploitation. Avoid using the argument payrollId in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

CVE-2025-4531

Affected Products

Seeyon Zhiyuan Oa Web Application System

References · 11

• 🔥 https://wx.mail.qq.com/s?k=iGTE4n4wT2AEdHPxOR · Exploit
• https://osv.dev/vulnerability/CVE-2025-4531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4531 · Security Note
• https://t.me/cvetracker/23572 · Telegram Post
• https://twitter.com/CVEnew/status/1921442787095871971 · Twitter Post
• https://vuldb.com/?submit.566097 · Note
• https://t.me/cvedetector/25038 · Telegram Post
• https://vuldb.com/?ctiid.308276 · Note
• https://t.me/cvenotify/121665 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1921455689009889495 · Twitter Post
• https://vuldb.com/?id.308276 · Note