CVE-2025-15563

概要

参考情報

• r.sec-consult.com/worktime · Third Party Advisory

worktime のその他の脆弱性

• CVE-2025-15562中 6.1The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. T…
• CVE-2025-15561高 7.8An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYST…
• CVE-2025-15560高 8.8An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL qu…
• CVE-2025-15559緊急 9.8An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generat…