Medium severity6.5NVD Advisory· Published Nov 4, 2025· Updated Jun 17, 2026

CVE-2025-63294

Description

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WorkDo/Hrm SaaS
cpe:2.3:a:workdo:hrm_saas:8.1:*:*:*:*:*:*:*
WorkDo/HRM SaaS HR and Payroll Toolcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =8.1

Patches

Vulnerability mechanics

References

medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177nvdExploitThird Party Advisory
codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934nvdProduct
workdo.io/hrm-saas-human-resource-management-software/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000