CVE-2025-48783 — Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

CVE-2025-48783

Soar Cloud HRD Human Resource Management System - External Control of File Name or Path PUBLISHED

Description (CNA)

An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths.

Affected (CNA)

Vendor / product	Versions
Soar Cloud System CO., LTD. / HRD Human Resource Management System	affected 0 through 7.3.2025.0408

CWE

CWE-73

References

https://zuso.ai/advisory/za-2025-08

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.