PT-2025-7690 · Sourcecodester · Sourcecodester Best Employee Management System

Dariusz · Published 2025-02-23 · Updated 2025-02-23 · CVE-2025-1593

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0

Description A critical issue has been discovered, affecting the Profile Picture Handler component, specifically the file / hr soft/assets/uploadImage/Profile/. This issue allows for unrestricted upload, which can be initiated remotely.

Recommendations For SourceCodester Best Employee Management System version 1.0, consider restricting access to the Profile Picture Handler component to minimize the risk of exploitation. As a temporary workaround, avoid using the upload functionality in the Profile Picture Handler until a fix is available.

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2025-1593

Affected Products

Sourcecodester Best Employee Management System

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-1593 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1593 · Vendor Advisory
• https://vuldb.com/?submit.505212 · Note
• https://t.me/cvedetector/18756 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1893759631450599689 · Twitter Post
• https://twitter.com/CVEnew/status/1893756341845459197 · Twitter Post
• https://sourcecodester.com · Note
• https://t.me/cvenotify/112190 · Telegram Post
• https://vuldb.com/?ctiid.296577 · Note
• https://vuldb.com/?id.296577 · Note