CVE-2025-2589 MEDIUM

CVE-2025-2589: code-projects Human Resource Management System Account.go Index improper authorization

Vendor Code-Projects
Product Human Resource Management System
Weakness CWE-285
Published March 21, 2025
Last update March 21, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

March 21, 2025 CVE published
March 21, 2025 Record updated