← Database

CVE-2025-2589

MEDIUM CVSS: 5.5 Published: 2025-03-21 Modified: 2026-06-17

Description

A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.

Affected Platforms

Code-Projects Human Resource Management

Weakness Type

CWE-266, CWE-285, CWE-862

References