PT-2025-24065 · Unknown · Soar Cloud Hrd Human Resource Management System

Yen Chun Shen · Published 2025-06-06 · Updated 2026-02-04 · CVE-2025-48783

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408

Description The issue concerns an external control of file name or path vulnerability in the delete file function. This allows remote attackers to delete partial files by specifying arbitrary file paths.

Recommendations For Soar Cloud HRD Human Resource Management System versions prior to 7.3.2025.0408, consider restricting access to the delete file function until a patch is available. As a temporary workaround, limit the ability to specify arbitrary file paths in the delete file function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-48783

Affected Products

Soar Cloud Hrd Human Resource Management System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-48783 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48783 · Vendor Advisory
• https://t.me/cvetracker/25604 · Telegram Post
• https://twitter.com/CVEnew/status/1930925641328968190 · Twitter Post
• https://t.me/latest_high_impact_cve/2565 · Telegram Post
• https://t.me/cvenotify/124889 · Telegram Post
• https://t.me/cveNotify/150847 · Telegram Post
• https://zuso.ai/advisory/za-2025-08 · Note