Unrated severityNVD Advisory· Published Mar 21, 2025· Updated Mar 21, 2025
code-projects Human Resource Management System Account.go Index improper authorization
CVE-2025-2589
Description
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 1.0.1
- code-projects/Human Resource Management Systemv5Range: 1.0.1
Patches
Vulnerability mechanics
References
5- github.com/38279/1/issues/1mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- code-projects.orgmitreproduct
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.