CVE-2025-48781 — Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

CVE-2025-48781

Soar Cloud HRD Human Resource Management System - External Control of File Name or Path PUBLISHED

Description (CNA)

An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths.

Affected (CNA)

Vendor / product	Versions
Soar Cloud System CO., LTD. / HRD Human Resource Management System	affected 0 through 7.3.2025.0408

CWE

CWE-73

References

https://zuso.ai/advisory/za-2025-06

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.