← Database

CVE-2025-15563

MEDIUM CVSS: 5.3 Published: 2026-02-19 Modified: 2026-06-17

Description

Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization check is applied here.

Affected Platforms

Nestersoft Worktime

Weakness Type

CWE-862

References