CVE-2025-25241

Summary

CVE-2025-25241 is a vulnerability affecting an application where a missing authorization check enables logged-in attackers to access and delete "My Overtime Requests," potentially exposing employee information. This issue poses a low risk to confidentiality and integrity, but does not impact the application's availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.