CVE-2025-48781highCWE-73

CVE-2025-48781: high-severity vulnerability in Soar Cloud System CO., LTD.

Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

Published

Follow this CVE+ Monitor HRD Human Resource Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Affected products
Soar Cloud System CO., LTD. · HRD Human Resource Management System
Related CVEs — Soar Cloud System CO., LTD.

In the same product, most dangerous first.

CVE-2025-48780CRITICALSoar Cloud HRD Human Resource Management System - Deserialization of Untrusted DataEPSS 0.6%CVE-2025-48782CRITICALSoar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous TypeEPSS 0.5%CVE-2025-5192CRITICALSoar Cloud HRD Human Resource Management System - Missing Authentication for Critical FunctionEPSS 0.5%CVE-2025-48783HIGHSoar Cloud HRD Human Resource Management System - External Control of File Name or PathEPSS 0.4%CVE-2025-48784HIGHSoar Cloud HRD Human Resource Management System - Missing AuthorizationEPSS 0.4%