Paper/Archive/CVE-2025-48782

CVE-2025-48782

Soar Cloud System CO., LTD. HRD Human Resource Management System — Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

EPSS 0.5%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 44.0.440 × 208.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

Affected

ProductAffectedFixed inSource

HRD Human Resource Management System≤ 7.3.2025.0408–CNA

Scores by source

ZUSO ART (CNA)9.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupzuso.ai/advisory/za-2025-07