CVE-2025-48782criticalCWE-434

CVE-2025-48782: fallo crítico en Soar Cloud System CO., LTD.

Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

Publicada el

Seguir esta CVE+ Monitorear HRD Human Resource Management System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.9epss 0.5%
An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H
Productos afectados
Soar Cloud System CO., LTD. · HRD Human Resource Management System
CVEs relacionadas — Soar Cloud System CO., LTD.

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-48780CRITICALSoar Cloud HRD Human Resource Management System - Deserialization of Untrusted DataEPSS 0.6%CVE-2025-5192CRITICALSoar Cloud HRD Human Resource Management System - Missing Authentication for Critical FunctionEPSS 0.5%CVE-2025-48781HIGHSoar Cloud HRD Human Resource Management System - External Control of File Name or PathEPSS 0.5%CVE-2025-48783HIGHSoar Cloud HRD Human Resource Management System - External Control of File Name or PathEPSS 0.4%CVE-2025-48784HIGHSoar Cloud HRD Human Resource Management System - Missing AuthorizationEPSS 0.4%