VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 15, 2025· Updated Jun 17, 2026

CVE-2025-47789

CVE-2025-47789

Description

Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attacker can craft a Horilla URL that refers to an external domain. Upon clicking and logging in, the user is redirected to an external domain. This allows the redirection to any arbitrary site, including phishing or malicious domains, which can be used to impersonate Horilla and trick users. Commit 1c72404df6888bb23af73c767fdaee5e6679ebd6 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Horilla Opensource/Horilla3 versions
    cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:horilla:horilla:*:*:*:*:*:*:*:*range: <1.3.1
    • (no CPE)range: <=1.3
    • (no CPE)range: <= 1.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.