CVE-2025-48783CWE-73

Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

High · published June 6, 2025

CVSS v4.0
8.8
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-06-06T09:27Z
EPSS history
Timeline
  • 06 JUN 09:27Z
    Soar Cloud HRD Human Resource Management System - External Control of File Name or Path
    cvelistv5