CVE-2025-48782

CRITICAL

9.8

Description

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published6/6/2025

Last Modified2/4/2026

Sourcenvd

Honeypot Sightings0

Affected Products

scshr:hr_portal

Weaknesses (CWE)

CWE-434

References

https://zuso.ai/advisory/za-2025-07(ART@zuso.ai)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.