CVE-2025-29033

A security vulnerability exists in BambooHR Build v.25.0210.170831-83b08dd where a remote attacker can escalate privileges by exploiting the /saml/index.php?r= HTTP GET parameter. This flaw allows an attacker to gain elevated access to the system. As a temporary workaround, it is recommended to r...

CVE-2025-29033

An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote attacker to escalate privileges via the /saml/index.php?r=" HTTP GET parameter...

CVE-2025-29033: Improper Privilege Management

An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote attacker to escalate privileges via the /saml/index.php?r=" HTTP GET parameter...