Lucene search
K

9 matches found

CNVD
CNVD
added 2025/10/15 12:0 a.m.2 views

Bold Workplanner Insecure Direct Object Reference Vulnerability

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. An insecure direct object reference vulnerability exists in Bold Workplanner versions prior to 2.5.25, which stems from a lack of sufficient validation of user input, and can be...

7.1CVSS6.8AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31724

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00038EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/01 11:17 a.m.3 views

CVE-2025-41092

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers...

7.1CVSS6.6AI score0.00038EPSS
Exploits0References1
OSV
OSV
added 2025/09/30 11:37 a.m.1 views

CVE-2025-41092

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers...

4.3CVSS5.8AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/30 11:12 a.m.3 views

CVE-2025-41092 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers...

7.1CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/09/30 11:12 a.m.10 views

CVE-2025-41092

Summary: CVE-2025-41092 affects Bold Workplanner. Vulnerability: Insecure Direct Object Reference (IDOR) due to insufficient input validation, enabling an authenticated user to access time record details via unauthorized internal identifiers. Affected versions: Bold Workplanner

7.1CVSS6.3AI score0.00038EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/30 11:12 a.m.2 views

CVE-2025-41092 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers...

7.1CVSS6.3AI score0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/30 12:0 a.m.2 views

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. An insecure direct object reference vulnerability exists in Bold Workplanner versions prior to 2.5.25, which stems from a lack of sufficient validation of user input, and can be...

7.1CVSS6.7AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.2 views

PT-2025-39973

Name of the Vulnerable Software and Affected Versions BOLD Workplanner versions prior to 2.5.25 Description An Insecure Direct Object Reference IDOR issue exists in BOLD Workplanner. The problem stems from insufficient validation of user input, potentially allowing an authenticated user to access...

7.1CVSS6.5AI score0.00038EPSS
Exploits0References3
Rows per page
Query Builder