CVE-2025-8057CWE-285CWE-610CWE-639

IDOR in Patika Global Technologies' HumanSuite

Medium · published September 16, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client.

This issue affects HumanSuite: before 53.21.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-610 · Externally Controlled Reference to a Resource in Another Sphere; CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-09-16T14:02Z
EPSS history
Timeline
  • 16 SEP 14:02Z
    IDOR in Patika Global Technologies' HumanSuite
    cvelistv5