CVE-2025-48782

Published Jun 6, 2025

Last updated a month ago

CVSS critical 9.9

Overview

Description: An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.
Source: ART@zuso.ai
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.9
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

Weaknesses

ART@zuso.ai: CWE-434

Hype score: Not currently trending

CVE-2025-48782 An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.20… https://t.co/Nm3IYECp5h
@CVEnew
6 Jun 2025
338 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes

References

Sources include official advisories and independent security research.