CVE-2025-48782

CRITICAL

9.8

Descricao

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado6/6/2025

Ultima modificacao2/4/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

scshr:hr_portal

Fraquezas (CWE)

CWE-434

Referencias

https://zuso.ai/advisory/za-2025-07(ART@zuso.ai)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.