CVE-2025-15563

Mô tả

Tham khảo

• r.sec-consult.com/worktime · Third Party Advisory

Lỗ hổng khác của worktime

• CVE-2025-15562TRUNG BÌNH 6.1The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. T…
• CVE-2025-15561CAO 7.8An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYST…
• CVE-2025-15560CAO 8.8An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL qu…
• CVE-2025-15559NGHIÊM TRỌNG 9.8An unauthenticated attacker can inject OS commands when calling a server API endpoint in NesterSoft WorkTime. The server API call to generat…