CVE-2025-48781CWE-73

Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

High · published June 6, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS
0.00446 · 37.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-06-06T09:21Z
EPSS history
Timeline
  • 06 JUN 09:21Z
    Soar Cloud HRD Human Resource Management System - External Control of File Name or Path
    cvelistv5