CVEvulnerability

CVE-2025-63294

6.5 MEDIUM Published 2025-11-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-11-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-862

Description

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users.

Affected configurations

• workdo hrm saas 8.1

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References