PT-2025-45014 · Unknown · Workdo Hrm
CVE-2025-63294
·
Published
2025-11-04
·
Updated
2025-11-06
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
WorkDo HRM SaaS HR and Payroll Tool version 8.1
Description
WorkDo HRM SaaS HR and Payroll Tool version 8.1 has an issue with insecure permissions. An authenticated user is able to create leave or resignation records for other users.
Recommendations
Apply appropriate access controls to prevent unauthorized record creation.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Workdo Hrm