CVSS 4.0
5.1 mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:NCVE-2025-2589
Medium (5.1) in code-projects human resource management. EPSS 0.5% chance of exploitation in the next 30 days.
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-862, CWE-266, CWE-285
- Published
- Modified
- Record from
- the NVD, synced
Affected
- code-projects:human_resource_management