Beveiligingsadvies

CVE-2025-4531

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-11 05:31:06

Laatst bijgewerkt 2025-05-12 13:50:33

Toegewezen door VulDB

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\WEB-INF\classes\com\ours\www\ehr\salary\service\data\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

← Alle CVE's bekijken Bekijk op cve.org ↗