CVE-2025-48780criticalCWE-502

CVE-2025-48780: falha crítica em Soar Cloud System CO., LTD.

Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data

Publicada em

Seguir esta CVE+ Monitorar HRD Human Resource Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 0.6%
A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H
Produtos afetados
Soar Cloud System CO., LTD. · HRD Human Resource Management System
CVEs relacionadas — Soar Cloud System CO., LTD.

No mesmo produto, das mais perigosas para as menos.

CVE-2025-48782CRITICALSoar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous TypeEPSS 0.5%CVE-2025-5192CRITICALSoar Cloud HRD Human Resource Management System - Missing Authentication for Critical FunctionEPSS 0.5%CVE-2025-48781HIGHSoar Cloud HRD Human Resource Management System - External Control of File Name or PathEPSS 0.5%CVE-2025-48783HIGHSoar Cloud HRD Human Resource Management System - External Control of File Name or PathEPSS 0.4%CVE-2025-48784HIGHSoar Cloud HRD Human Resource Management System - Missing AuthorizationEPSS 0.4%