PT-2025-3974 · Aenrich Technology · A+Hrd

Linwz · Published 2025-01-20 · Updated 2025-01-20 · CVE-2025-0583

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions a+HRD from aEnrich Technology (affected versions not specified)

Description The issue is a Reflected Cross-site Scripting vulnerability, which allows unauthenticated remote attackers to execute arbitrary JavaScript codes in the user's browser through phishing attacks. This enables attackers to perform malicious actions on the user's system without their knowledge.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-0583

Affected Products

A+Hrd

References · 8

• https://osv.dev/vulnerability/CVE-2025-0583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0583 · Security Note
• https://twcert.org.tw/en/cp-139-8369-cf396-2.html · Note
• https://t.me/cvedetector/15873 · Telegram Post
• https://twcert.org.tw/tw/cp-132-8368-1e317-1.html · Note
• https://twitter.com/CVETracker/status/1881431690645557576 · Twitter Post
• https://t.me/cvenotify/107913 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1881167713915068711 · Twitter Post