CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization

A vulnerability was identified in Himool ERP up to 2.2. Affected by this issue is the function updateaccount of the file /api/admin/updateaccount/ of the component AdminActionViewSet. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is public...

PT-2025-49250

Name of the Vulnerable Software and Affected Versions Himool ERP versions up to 2.2 Description A security issue exists in Himool ERP. This issue involves improper authorization due to manipulation of the update account function within the AdminActionViewSet component. The vulnerable file is...