PT-2025-37992 · Unknown · Humansuite

Batuhan Asan · Published 2025-09-16 · Updated 2025-09-30 · CVE-2025-8276

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HumanSuite versions prior to 53.21.0

Description HumanSuite is susceptible to multiple issues including improper encoding or escaping of output, improper neutralization of special elements in output used by a downstream component (injection), improper neutralization of argument delimiters in a command (argument injection), and improper control of generation of code (code injection). These issues allow for input data manipulation, format string injection, reflection injection, and code injection.

Recommendations Update HumanSuite to version 53.21.0 or later.

Fix

Improper Encoding or Escaping of Output

Argument Injection

Code Injection

Special Elements Injection

XSS

Weakness Enumeration

CWE-116

CWE-88

CWE-94

CWE-74

CWE-79

Related Identifiers

CVE-2025-8276

Affected Products

Humansuite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-8276 · Security Note
• https://t.me/cveNotify/136921 · Telegram Post
• https://twitter.com/CveFindCom/status/1967953980224360817 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0257 · Note
• https://t.me/cveNotify/135922 · Telegram Post
• https://t.me/CVEtracker/32643 · Telegram Post
• https://twitter.com/CVEnew/status/1967965080139747659 · Twitter Post