CVE-2025-48782 CRITICAL

CVE-2025-48782: Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

Vendor Soar Cloud System Co., Ltd.
Product HRD Human Resource Management System
Weakness CWE-434 · Unrestricted file upload
Published June 6, 2025
Last update June 6, 2025
View on NVD All CVEs

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

What the vulnerability does

01Description

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

Key dates

02Disclosure timeline

June 6, 2025 CVE published
June 6, 2025 Record updated