PT-2025-45014 · Unknown · Workdo Hrm

Published 2025-11-04 · Updated 2025-11-06 · CVE-2025-63294

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WorkDo HRM SaaS HR and Payroll Tool version 8.1

Description WorkDo HRM SaaS HR and Payroll Tool version 8.1 has an issue with insecure permissions. An authenticated user is able to create leave or resignation records for other users.

Recommendations Apply appropriate access controls to prevent unauthorized record creation.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-63294

Affected Products

Workdo Hrm

References · 7

• 🔥 https://medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63294 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63294 · Vendor Advisory
• https://codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934 · Note
• https://t.me/cveNotify/141978 · Telegram Post
• https://workdo.io/hrm-saas-human-resource-management-software · Note
• https://t.me/CVEtracker/36526 · Telegram Post