CVE-2025-51506

The HRForecast Suite (also referred to as TalentNeuron Suite ) version 0.4.3 is vulnerable to a SQL injection flaw within the smartLibrary component. The vulnerability exists in the valueKey parameter of the /api/smartlibrary/v2/en/dictionaries/options/lookup API endpoint. This flaw allows any au...