PT-2025-24058 · Unknown · Soar Cloud Hrd Human Resource Management System

Yen Chun Shen · Published 2025-06-06 · Updated 2026-02-04 · CVE-2025-48780

Positive Technologies (AI Summary)

CVSS v4.0

9.9

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

Name of the Vulnerable Software and Affected Versions Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408

Description A deserialization of untrusted data issue in the download file function allows remote attackers to execute arbitrary system commands via a crafted serialized object.

Recommendations For Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the download file function to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-48780

Affected Products

Soar Cloud Hrd Human Resource Management System

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-48780 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48780 · Vendor Advisory
• https://t.me/latest_high_impact_cve/2564 · Telegram Post
• https://t.me/cvetracker/25601 · Telegram Post
• https://t.me/cvenotify/124886 · Telegram Post
• https://twitter.com/offseq/status/1930927693530374304 · Twitter Post
• https://t.me/cveNotify/150856 · Telegram Post
• https://twitter.com/CVEnew/status/1930923381823537474 · Twitter Post
• https://zuso.ai/advisory/za-2025-05 · Note