CVE-2025-48782 — Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

CVE-2025-48782

Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type PUBLISHED

Description (CNA)

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

Affected (CNA)

Vendor / product	Versions
Soar Cloud System CO., LTD. / HRD Human Resource Management System	affected 0 through 7.3.2025.0408

CWE

CWE-434

References

https://zuso.ai/advisory/za-2025-07

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.