CVE-2025-48780 — Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data

CVE-2025-48780

Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data PUBLISHED

Description (CNA)

A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object.

Affected (CNA)

Vendor / product	Versions
Soar Cloud System CO., LTD. / HRD Human Resource Management System	affected 0 through 7.3.2025.0408

CWE

CWE-502

References

https://zuso.ai/advisory/za-2025-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.